{"metadata":{"generatedAt":"2026-10-20T03:01:48.951Z","reportDate":"2026-10-20","totalItems":5076,"sourceBreakdown":{"cisa-kev":7,"nvd":4259,"otx":29,"cisa-advisories":14,"vendor-blogs":627,"malware-bazaar":20,"abuse-ipdb":20,"threatfox":3,"general-news":110},"categoryBreakdown":{"vulnerability":4263,"advisory":634,"malware":20,"ip-reputation":20,"threat-intel":29,"news":110},"fetchErrors":[]},"highlights":[{"id":"cisa-kev-CVE-2026-102764","source":"cisa-kev, nvd, otx","category":"vulnerability","severity":"critical","title":"CVE-2026-102764 — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability","description":"BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.","indicators":{"cves":["CVE-2026-102764","CVE-2023-46805","CVE-2024-21887"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":"e7c775c80e2eb37cfd3443e35fcc44a4b192d067","sha256":"dc14e215269a93fdbc4c1a80b984c23faf7af0911c6dbb85309796a6f2ae95fb"}},"tags":["beyondtrust","sawfly","credential harvesting","tunneler","bareclaw","privilege escalation","cve-2026-102764","prc-nexus","zero-day exploitation","webshell","remote support","zeroday","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102764","label":"NVD","domainType":"primary"},{"url":"https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066","label":"13061848-ea10-403d-bd75-c83a022c2891","domainType":"other"},{"url":"https://www.beyondtrust.com/blog/entry/bt26-05","label":"13061848-ea10-403d-bd75-c83a022c2891","domainType":"other"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://otx.alienvault.com/pulse/6ad1cb3feb7d313786acfcf5","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"cisa-kev-CVE-2026-76519","source":"cisa-kev, nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-76519 — Cisco Secure Email Gateway Relative Path Traversal Vulnerability","description":"Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.","indicators":{"cves":["CVE-2026-76519"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76519","label":"NVD","domainType":"primary"},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp","label":"psirt@cisco.com","domainType":"primary"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76519","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-cisa-urges-patching-newly-exploited-vulnerability-in-ivanti-connect-secure","source":"cisa-advisories","category":"advisory","severity":"critical","title":"CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure","description":"CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96119","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96119 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive informa…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.","indicators":{"cves":["CVE-2026-96119"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:02.053Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292159","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87689","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-87689 — The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::Web…","description":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) ha…","indicators":{"cves":["CVE-2026-87689"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.110Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/rapid7/metasploit-framework","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-89107","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89107 — SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by…","description":"SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interprete…","indicators":{"cves":["CVE-2026-89107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.507Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3805589","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89108","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89108 — SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundarie…","description":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying…","indicators":{"cves":["CVE-2026-89108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.637Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3798788","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89110","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89110 — SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal fun…","description":"SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of…","indicators":{"cves":["CVE-2026-89110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.767Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3797111","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89111","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89111 — The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applic…","description":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.","indicators":{"cves":["CVE-2026-89111"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.890Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/SAP/cloud-sdk-python/security/advisories/GHSA-4mv3-jxxm-9cx2","label":"cna@sap.com","domainType":"primary"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85529","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85529 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper…","indicators":{"cves":["CVE-2026-85529","CVE-2026-97229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:17:00.317Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/627709","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3975416","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/630686","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/4055749","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/4058589","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null}],"items":[{"id":"cisa-kev-CVE-2026-102764","source":"cisa-kev, nvd, otx","category":"vulnerability","severity":"critical","title":"CVE-2026-102764 — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability","description":"BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.","indicators":{"cves":["CVE-2026-102764","CVE-2023-46805","CVE-2024-21887"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":"e7c775c80e2eb37cfd3443e35fcc44a4b192d067","sha256":"dc14e215269a93fdbc4c1a80b984c23faf7af0911c6dbb85309796a6f2ae95fb"}},"tags":["beyondtrust","sawfly","credential harvesting","tunneler","bareclaw","privilege escalation","cve-2026-102764","prc-nexus","zero-day exploitation","webshell","remote support","zeroday","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102764","label":"NVD","domainType":"primary"},{"url":"https://beyondtrustcorp.service-now.com/csm?id=csm_kb_article&sysparm_article=KB0024066","label":"13061848-ea10-403d-bd75-c83a022c2891","domainType":"other"},{"url":"https://www.beyondtrust.com/blog/entry/bt26-05","label":"13061848-ea10-403d-bd75-c83a022c2891","domainType":"other"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102764","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://otx.alienvault.com/pulse/6ad1cb3feb7d313786acfcf5","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"cisa-kev-CVE-2026-76519","source":"cisa-kev, nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-76519 — Cisco Secure Email Gateway Relative Path Traversal Vulnerability","description":"Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.","indicators":{"cves":["CVE-2026-76519"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76519","label":"NVD","domainType":"primary"},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp","label":"psirt@cisco.com","domainType":"primary"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76519","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-cisa-urges-patching-newly-exploited-vulnerability-in-ivanti-connect-secure","source":"cisa-advisories","category":"advisory","severity":"critical","title":"CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure","description":"CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, which…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96119","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96119 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive informa…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.","indicators":{"cves":["CVE-2026-96119"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:02.053Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292159","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87689","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-87689 — The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::Web…","description":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) ha…","indicators":{"cves":["CVE-2026-87689"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.110Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/rapid7/metasploit-framework","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"},{"url":"https://github.com/rapid7/metasploit-framework/releases/tag/6.5.5","label":"cve@rapid7.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-89107","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89107 — SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by…","description":"SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interprete…","indicators":{"cves":["CVE-2026-89107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.507Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3805589","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89108","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89108 — SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundarie…","description":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying…","indicators":{"cves":["CVE-2026-89108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.637Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3798788","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89110","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89110 — SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal fun…","description":"SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on a preconfigured remote system. Depending on the remote connection configuration, this could lead to a full compromise of…","indicators":{"cves":["CVE-2026-89110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.767Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3797111","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89111","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89111 — The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applic…","description":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.","indicators":{"cves":["CVE-2026-89111"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.890Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/SAP/cloud-sdk-python/security/advisories/GHSA-4mv3-jxxm-9cx2","label":"cna@sap.com","domainType":"primary"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85529","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85529 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper…","indicators":{"cves":["CVE-2026-85529","CVE-2026-97229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:17:00.317Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/627709","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3975416","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/630686","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/4055749","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/4058589","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108971","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-108971 — A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file…","description":"A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may be…","indicators":{"cves":["CVE-2026-108971"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T06:16:50.090Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/sweethub521/somevul/blob/main/dlink-dcs930l-bootloader-emergency-room-flash.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108971","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999605","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416789","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416789/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.dlink.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109108","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109108 — A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the functio…","description":"A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and m…","indicators":{"cves":["CVE-2026-109108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:16:59.917Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://gist.github.com/Rauzk/0a61823f0033441142dc1c3f4a776e7c","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109108","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/909182","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416859","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416859/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109109","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109109 — A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the functio…","description":"A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in stack-based buffer overflow. It is poss…","indicators":{"cves":["CVE-2026-109109"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:17:00.110Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://gist.github.com/Rauzk/9ef4fe7574e5689386cc43139f4cf9e1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109109","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/909191","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416860","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416860/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108179","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-108179 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i…","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1.","indicators":{"cves":["CVE-2026-108179","CVE-2026-109687","CVE-2026-109901","CVE-2026-105067","CVE-2026-89076","CVE-2026-108497","CVE-2026-109688","CVE-2026-109698","CVE-2026-94388","CVE-2026-111399","CVE-2026-109894","CVE-2026-110895","CVE-2026-108776"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:14.153Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/bulk-editor/vulnerability/wordpress-wolf-plugin-1-1-1-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-9-7-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/cp-multi-view-calendar/vulnerability/wordpress-cp-multi-view-event-calendar-plugin-1-4-41-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/modern-events-calendar-lite/vulnerability/wordpress-modern-events-calendar-lite-plugin-7-37-0-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-4-10-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-9-7-sql-injection-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/mangboard/vulnerability/wordpress-mang-board-wp-plugin-2-4-4-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/halfdata-green-popups/vulnerability/wordpress-green-popups-plugin-7-6-3-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-16-1-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/booktics/vulnerability/wordpress-booktics-plugin-1-0-29-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/support-genix-lite/vulnerability/wordpress-support-genix-plugin-1-4-54-sql-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://lists.apache.org/thread.html/x3m1k00f6470238mw51jbnpnh642jv0d","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/17","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109110","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109110 — A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the c…","description":"A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted…","indicators":{"cves":["CVE-2026-109110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:15.370Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://drive.google.com/file/d/1KtZZ7kjVswRgP2VLEx7M7gEafyY8Wp2Q/view?usp=drive_link","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-109110","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/913573","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416861","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416861/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89309","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89309 — The authorization middleware of the WMS MobileServer fails to require authentication in two distinct…","description":"The authorization middleware of the WMS MobileServer\nfails to require authentication in two distinct cases. First, it\nonly requires an Authorization header for GET and HEAD requests; requests\nusing any other HTTP method are processed without an authentication check.\nSecond, for any HTTP method inclu…","indicators":{"cves":["CVE-2026-89309"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:22.140Z","fetchedAt":"2026-10-20T03:01:48.432Z","references":[{"url":"https://www.jtl-software.com/de/cve-2026-89309-cve-2026-89310","label":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-44415","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-44415 — Affected systems do not properly restrict access to internal APIs and paths for authenticated users.…","description":"Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the…","indicators":{"cves":["CVE-2026-44415"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:16.293Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-377139.html","label":"productcert@siemens.com","domainType":"other"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-832641.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63350","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-63350 — Affected devices do not properly restrict executable content contained in imported trace files. This…","description":"Affected devices do not properly restrict executable content contained in imported trace files.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow att…","indicators":{"cves":["CVE-2026-63350"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:16.777Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63353","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-63353 — Affected devices do not properly sanitize comment fields contained in imported trace files before re…","description":"Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Suc…","indicators":{"cves":["CVE-2026-63353"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:18.040Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63354","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-63354 — Affected devices do not properly validate and sanitize visual marker data contained in imported CSV…","description":"Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially craf…","indicators":{"cves":["CVE-2026-63354"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:18.450Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109157","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109157 — A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the func…","description":"A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The explo…","indicators":{"cves":["CVE-2026-109157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T11:17:14.873Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109157","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979590","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416890","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416890/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109705","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109705 — Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Net…","description":"Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109705"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:20.587Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2040905","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109707","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109707 — Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Fi…","description":"Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109707"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:20.803Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2059150","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109708","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109708 — Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability…","description":"Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109708"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:20.910Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2059151","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109740","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109740 — Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerabili…","description":"Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109740"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.587Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2057113","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109745","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109745 — Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was…","description":"Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109745"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.360Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2061784","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109750","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109750 — Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firef…","description":"Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109750"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.887Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2067571","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109755","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109755 — Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158…","description":"Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.417Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068448","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65162","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-65162 — NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initializatio…","description":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data…","indicators":{"cves":["CVE-2026-65162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:32.837Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65162","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65162","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65173","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-65173 — NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation end…","description":"NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.","indicators":{"cves":["CVE-2026-65173"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:33.540Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65173","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65173","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74040","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-74040 — Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterH…","description":"Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a cluster worker to overwrite protected master files. Attackers controlling a worker can use a trailing-slash basename bypass and missing extra_valid enforcem…","indicators":{"cves":["CVE-2026-74040"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:40.720Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-88p6-7cm8-xwj8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-3.9.0-before-4.14.8-arbitrary-file-overwrite-rce-via-process-files-from-worker","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-88p6-7cm8-xwj8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74041","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-74041 — Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and…","description":"Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:update_config can inject an uppercase LOG_FORMAT command localfile that the collector runs as root on relo…","indicators":{"cves":["CVE-2026-74041"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:40.860Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-cjf8-wjx6-hjw6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.14.3-before-4.14.8-remote-command-validation-bypass-via-case-mismatch","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-cjf8-wjx6-hjw6","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74043","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-74043 — Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_r…","description":"Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows malicious cluster workers to write files at arbitrary paths. Attackers holding the cluster key can send DistributedAPI requests with ../ sequences in file…","indicators":{"cves":["CVE-2026-74043"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:41.003Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-cw26-jj8q-x7w5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.1.1-before-4.14.8-path-traversal-via-cluster-upload-functions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104192","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104192 — Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueOb…","description":"Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK with a consumer group's global PEL and a consumer-local PEL, then free the shared object when a duplicate consumer entry is…","indicators":{"cves":["CVE-2026-104192"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:31.087Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/dragonflydb/dragonfly/commit/6c6b27a5cfd03d67eb9583ab84a0f0709e3bc77e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dragonflydb/dragonfly/pull/7929","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dragonflydb/dragonfly/security/advisories/GHSA-cg35-6jf4-crfh","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-53709","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-53709 — MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.p…","description":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matche…","indicators":{"cves":["CVE-2026-53709"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:44.873Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/IBM/mcp-context-forge/commit/2af690f894b6e35f5f21190fdab1505f023a5272","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-m8rv-5m6m-32ff","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55675","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55675 — The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit…","description":"The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, and the secret-bearing workflow_run job in .github/workflows/…","indicators":{"cves":["CVE-2026-55675"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:21.890Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/saltyorg/docs/commit/649c9aea2daef1168eeb0415b44e65dbbde9f220","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/saltyorg/docs/security/advisories/GHSA-wr2h-fpxm-ff4x","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/saltyorg/docs/security/advisories/GHSA-wr2h-fpxm-ff4x","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55695","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55695 — FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.…","description":"FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger perform_update, which passes the URL to update.sh. The updater clon…","indicators":{"cves":["CVE-2026-55695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:22.057Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/fearlessgeekmedia/FearlessCMS/commit/6dba91d496463e3940a2c917af3cae97b191de92","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/fearlessgeekmedia/FearlessCMS/pull/64","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/fearlessgeekmedia/FearlessCMS/releases/tag/0.1.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/fearlessgeekmedia/FearlessCMS/security/advisories/GHSA-56wm-3q3v-m93m","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/fearlessgeekmedia/FearlessCMS/security/advisories/GHSA-56wm-3q3v-m93m","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78802","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-78802 — An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allo…","description":"An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.","indicators":{"cves":["CVE-2026-78802"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:22.820Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/Skyworth/unauthorized-rce.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://www.skyworthdigital.com/","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102989","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102989 — TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework f…","description":"TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an unauthenticat…","indicators":{"cves":["CVE-2026-102989"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:14.797Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/TanStack/router/commit/d521abd71c69f1ff010bb3def4d417cb5fa058cb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TanStack/router/pull/8573","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TanStack/router/releases/tag/release-2026-09-30-1747","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TanStack/router/security/advisories/GHSA-qx66-fv34-fjm8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106042","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-106042 — An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 all…","description":"An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.","indicators":{"cves":["CVE-2026-106042"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:16.273Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs","label":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109412","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109412 — An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attac…","description":"An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.","indicators":{"cves":["CVE-2026-109412"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:28.267Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026","label":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110116","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110116 — Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in t…","description":"Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overw…","indicators":{"cves":["CVE-2026-110116"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:35.843Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java#L168-L182","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/digital-infrastructure-filemanager-path-traversal-rw","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/digital-infrastructure-9.6.5-through-9.6.11-path-traversal-via-filemanager-storefile","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-54454","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-54454 — OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h…","description":"OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/ImportUI.php can preserve an uploaded file's original name for one import data type and place the file in the web-accessible…","indicators":{"cves":["CVE-2026-54454"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:41.310Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/opencats/OpenCATS/commit/7f151741598c36c8233ada4b6b64f12b721d4907","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opencats/OpenCATS/pull/808","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opencats/OpenCATS/releases/tag/v0.10.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opencats/OpenCATS/security/advisories/GHSA-v9gx-5qhj-jf7c","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55183","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55183 — RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes effi…","description":"RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin *, and --rc-serve. A malicious web page opened by a user while the d…","indicators":{"cves":["CVE-2026-55183"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:41.893Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/Zarestia-Dev/rclone-manager/commit/daa379498fc1aac453bcf1864d7ea072b80ffbe8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Zarestia-Dev/rclone-manager/releases/tag/v0.2.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Zarestia-Dev/rclone-manager/security/advisories/GHSA-f3qj-7hx5-q4c8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Zarestia-Dev/rclone-manager/security/advisories/GHSA-f3qj-7hx5-q4c8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55562","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55562 — Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.11…","description":"Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.full_name value into HTML without applying encode_entities and inserts the result…","indicators":{"cves":["CVE-2026-55562"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:42.040Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/jhuckaby/Cronicle/commit/8b60eb5b041614ab661df50e58e612f5e42a7d30","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jhuckaby/Cronicle/releases/tag/v0.9.119","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jhuckaby/Cronicle/security/advisories/GHSA-vh39-3pcm-2j63","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jhuckaby/Cronicle/security/advisories/GHSA-vh39-3pcm-2j63","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69227","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-69227 — A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoi…","description":"A flaw in Portal for ArcGIS allows unauthenticated access to \n\ncertain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.","indicators":{"cves":["CVE-2026-69227"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:45.130Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgis-security-bulletin","label":"psirt@esri.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77459","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77459 — Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15,…","description":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitted…","indicators":{"cves":["CVE-2026-77459"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:46.050Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/argoproj/argo-cd/commit/1149cdc6e932208c4402183cc3d7b7485239940c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/commit/4bc8085b0a6d2296b849539d3d09fc7be7a4a511","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/commit/7f0a05834b05103d69d7c150e1ee36541b314696","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/commit/d5dd7019ee65be8895133fe4df554e28074242c4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-fmxq-cgp8-87wp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78799","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-78799 — Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 En…","description":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: <= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.","indicators":{"cves":["CVE-2026-78799"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:46.453Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/iKuai/authorized-path-raversal.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://www.ikuai8.com/","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.ikuai8.com/component/download","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94603","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-94603 — Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run…","description":"Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowin…","indicators":{"cves":["CVE-2026-94603"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:49.123Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/podman-container-tools/podman/commit/24706290d5c974f078d8ca284026802515f28e92","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/commit/3721ff82ffb44a4ceeaecc5abd3808e924a6b669","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/commit/450c64426dbcff1097d3c7911d791101e3d16f4c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/commit/7728ba0a90094408ad9078e36c3622a651d49616","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/commit/c74b1d37b3fb834b0de43e176565d9d8c254b627","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/commit/ea9243e04d1db3886dc3a51ee3300ffb547cfc02","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v5.8.8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/releases/tag/v6.1.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106173","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-106173 — A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo…","description":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.","indicators":{"cves":["CVE-2026-106173"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:14.697Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-180","label":"psirt@fortinet.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-37107","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-37107 — An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function…","description":"An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component","indicators":{"cves":["CVE-2026-37107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:23.847Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://gist.github.com/KyrieKlay/b61a7563d7887d2a01060fcb0bf825eb","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/danpros/htmly/releases/tag/v3.1.1","label":"cve@mitre.org","domainType":"primary"},{"url":"https://www.htmly.com/","label":"cve@mitre.org","domainType":"other"},{"url":"https://gist.github.com/KyrieKlay/b61a7563d7887d2a01060fcb0bf825eb","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-52394","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-52394 — DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.","description":"DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.","indicators":{"cves":["CVE-2026-52394"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:24.103Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"http://deepseek.com","label":"cve@mitre.org","domainType":"other"},{"url":"https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c","label":"cve@mitre.org","domainType":"primary"},{"url":"https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-92892","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-92892 — Potential arbitrary code execution, under specific configurations.","description":"Potential arbitrary code execution, under specific configurations.","indicators":{"cves":["CVE-2026-92892"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:26.530Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://docs.jfrog.com/releases/docs/jfrog-security-advisories","label":"reefs@jfrog.com","domainType":"other"},{"url":"https://github.com/jfrog/jfrog-cli/releases","label":"reefs@jfrog.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100133","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-100133 — Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused…","description":"Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potent…","indicators":{"cves":["CVE-2026-100133","CVE-2026-91013","CVE-2026-92911","CVE-2026-92922"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:39.690Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://www.adobe.com/trust/security/products/commerce/apsb26-153.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100202","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-100202 — Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute c…","description":"Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100202"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:40.143Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100202","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100219","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-100219 — Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.","description":"Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100219"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:42.163Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100219","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100222","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-100222 — Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute…","description":"Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100222"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:42.587Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100222","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102210","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102210 — Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o…","description":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102210","CVE-2026-83770","CVE-2026-97814"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:46.520Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102210","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83770","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97814","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102229","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102229 — Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code…","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-102229","CVE-2026-102238"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:48.577Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102229","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102238","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103849","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-103849 — Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engi…","description":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of…","indicators":{"cves":["CVE-2026-103849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:53.997Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://www.adobe.com/trust/security/products/commerce/apsb26-153.html","label":"psirt@adobe.com","domainType":"other"},{"url":"https://github.com/dinosn/cve-2026-103849-blockstrap-lab","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104584","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104584 — reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is…","description":"reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configuration field in web/reNgine/tasks.py (fetch_url and dir_file_fuzz functions).","indicators":{"cves":["CVE-2026-104584"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:55.417Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/AmalJafarzade/CVE-2026-104584","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/yogeshojha/rengine","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/AmalJafarzade/CVE-2026-104584","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104816","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104816 — Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS comp…","description":"Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme link…","indicators":{"cves":["CVE-2026-104816"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:55.547Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/misskey-dev/misskey/commit/8dd59a8c06da49b8f302d902d73d04397ee29366","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/pull/17831","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/releases/tag/2026.7.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/security/advisories/GHSA-p73x-6qrq-34jc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105008","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105008 — No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a…","description":"No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-105008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:57.093Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105008","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105010","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105010 — Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate priv…","description":"Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-105010"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:57.433Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105010","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105016","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105016 — Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a…","description":"Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-105016"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:57.750Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110130","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110130 — Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authent…","description":"Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for unauthenticated callers. Unauthenticated remote attackers can…","indicators":{"cves":["CVE-2026-110130"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:43.397Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-r3mg-r5vm-3v6w","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/dockhand-before-1.0.45-authentication-bypass-via-static-asset-check","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-r3mg-r5vm-3v6w","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69634","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-69634 — Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n…","description":"Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69634","CVE-2026-70095"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:56.343Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69634","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70095","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69639","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-69639 — Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code ove…","description":"Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69639","CVE-2026-69985"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:56.713Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69639","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69985","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69705","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-69705 — Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.","description":"Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69705"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:57.820Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69705","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69883","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-69883 — Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.","description":"Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69883","CVE-2026-70013","CVE-2026-70038"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:01.150Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69883","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70013","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70038","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69886","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-69886 — Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c…","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69886","CVE-2026-77496"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:01.503Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69886","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77496","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70024","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70024 — Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker…","description":"Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70024"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:13.487Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70024","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70092","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70092 — Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to…","description":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70092","CVE-2026-70109","CVE-2026-70147","CVE-2026-70153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:20.883Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70092","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70109","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70147","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70153","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70096","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70096 — Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to exec…","description":"Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70096"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:21.420Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70096","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70131","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70131 — Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to…","description":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70131","CVE-2026-70258","CVE-2026-83517","CVE-2026-85814","CVE-2026-96952"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:25.210Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70131","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70258","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83517","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85814","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96952","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70157","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70157 — Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to…","description":"Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:29.030Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70157","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70158","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70158 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an…","description":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","indicators":{"cves":["CVE-2026-70158","CVE-2026-85339","CVE-2026-85792","CVE-2026-85809"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:29.210Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70158","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85339","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85792","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85809","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70188","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70188 — Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core all…","description":"Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-70188","CVE-2026-88092"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:33.130Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70215","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70215 — Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a…","description":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70215","CVE-2026-88144","CVE-2026-88178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:36.237Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70215","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88144","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88178","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70242","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70242 — Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute co…","description":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70242","CVE-2026-70256","CVE-2026-70257","CVE-2026-70282","CVE-2026-70291","CVE-2026-97016","CVE-2026-108448"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:40.990Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70242","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70256","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70257","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70282","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70291","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97016","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108448","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70279","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70279 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex…","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-70279"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:47.373Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70279","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70300","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-70300 — Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute co…","description":"Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70300"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:50.007Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70300","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83519","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83519 — Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod…","description":"Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83519","CVE-2026-83693","CVE-2026-83748","CVE-2026-97815"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:57.757Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83519","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83693","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83748","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97815","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83578","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83578 — Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to exec…","description":"Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83578"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:00.457Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83578","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83780","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83780 — Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a ne…","description":"Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83780"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:26.917Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83780","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83782","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83782 — Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a n…","description":"Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83782"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:27.183Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83782","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83797","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83797 — Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute…","description":"Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83797","CVE-2026-97805"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:29.803Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83797","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97805","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83862","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83862 — Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code ove…","description":"Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:35.520Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83862","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83869","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83869 — Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code…","description":"Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83869"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:36.677Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83869","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83910","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83910 — Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.","description":"Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:46.063Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83910","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83928","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83928 — Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthor…","description":"Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83928","CVE-2026-96219"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:49.227Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83928","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96219","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83935","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83935 — Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a n…","description":"Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:50.337Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83935","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84015","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-84015 — Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthor…","description":"Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-84015"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:51.720Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84015","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85806","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85806 — Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacke…","description":"Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85806"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:04.770Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85806","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85818","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85818 — Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker…","description":"Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-85818"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:06.667Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85818","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85928","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85928 — Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke…","description":"Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85928"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:18.917Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85928","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88102","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-88102 — Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a ne…","description":"Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88102"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:28.217Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88102","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88117","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-88117 — Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network…","description":"Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88117","CVE-2026-88119","CVE-2026-88120","CVE-2026-96934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:30.107Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88117","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88119","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88120","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96934","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88156","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-88156 — Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute c…","description":"Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88156","CVE-2026-97012"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:35.710Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97012","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-92464","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-92464 — Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitr…","description":"Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user int…","indicators":{"cves":["CVE-2026-92464","CVE-2026-95631"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:43.370Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://www.adobe.com/trust/security/products/commerce/apsb26-153.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92909","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-92909 — Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrar…","description":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.","indicators":{"cves":["CVE-2026-92909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:43.613Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://www.adobe.com/trust/security/products/commerce/apsb26-153.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96096","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96096 — Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o…","description":"Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96096"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:45.403Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96096","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96113","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96113 — Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a netw…","description":"Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96113"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:45.733Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96113","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96252","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96252 — Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) all…","description":"Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-96252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:51.343Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96252","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96320","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96320 — Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov…","description":"Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96320"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:55.017Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96320","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96864","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96864 — Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute…","description":"Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96864"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:00.717Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96864","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96909","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96909 — Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over…","description":"Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:01.520Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96909","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96924","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-96924 — Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a…","description":"Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96924"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:03.867Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96924","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97749","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-97749 — Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a netwo…","description":"Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97749"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:12.340Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97749","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97816","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-97816 — Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network…","description":"Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97816"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:20.110Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97816","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103848","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-103848 — Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS…","description":"Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute…","indicators":{"cves":["CVE-2026-103848"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:11.267Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104252","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104252 — Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2,…","description":"Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML escaping.…","indicators":{"cves":["CVE-2026-104252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:12.453Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/pull/20255","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/pull/20273","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/pull/20274","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/releases/tag/v23.0.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/releases/tag/v24.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104585","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104585 — Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api…","description":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.","indicators":{"cves":["CVE-2026-104585"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:12.723Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/AmalJafarzade/CVE-2026-104585","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/MobileSecurityFramework/Mobile-Security-Framework-MobSF/blob/master/mobsf/DynamicAnalyzer/views/android/tests_common.py","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/AmalJafarzade/CVE-2026-104585","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105895","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105895 — Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result…","description":"Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user i…","indicators":{"cves":["CVE-2026-105895","CVE-2026-106626"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:15.420Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106629","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-106629 — Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could…","description":"Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable fie…","indicators":{"cves":["CVE-2026-106629","CVE-2026-106630","CVE-2026-106631","CVE-2026-106633","CVE-2026-107305","CVE-2026-109415","CVE-2026-110037","CVE-2026-110073","CVE-2026-110081"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:16.507Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-48382","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-48382 — Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result i…","description":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user int…","indicators":{"cves":["CVE-2026-48382","CVE-2026-48383","CVE-2026-75732","CVE-2026-90532"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:28.900Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63146","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-63146 — Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, atta…","description":"Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile() and DbInstall::dbControl(), combined with an SQL injection issue enab…","indicators":{"cves":["CVE-2026-63146"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:30.210Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-php-code-injection-via-config-inc-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-83662","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-83662 — Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An att…","description":"Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requ…","indicators":{"cves":["CVE-2026-83662"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:18:11.500Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-90531","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-90531 — Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('X…","description":"Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does…","indicators":{"cves":["CVE-2026-90531"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:19:10.030Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105897","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105897 — ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in pr…","description":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","indicators":{"cves":["CVE-2026-105897","CVE-2026-106622","CVE-2026-34633","CVE-2026-34634","CVE-2026-75748","CVE-2026-76001"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:29.240Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105898","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105898 — ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary co…","description":"ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vi…","indicators":{"cves":["CVE-2026-105898","CVE-2026-105901","CVE-2026-106089","CVE-2026-106090","CVE-2026-106612","CVE-2026-106614","CVE-2026-106615","CVE-2026-106617","CVE-2026-106618","CVE-2026-71385","CVE-2026-75994"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:29.353Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105899","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105899 — ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that coul…","description":"ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user intera…","indicators":{"cves":["CVE-2026-105899"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:29.483Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105903","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105903 — ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability…","description":"ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does…","indicators":{"cves":["CVE-2026-105903","CVE-2026-106621","CVE-2026-106624"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:29.813Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105994","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105994 — ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security f…","description":"ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.…","indicators":{"cves":["CVE-2026-105994","CVE-2026-106620"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:29.923Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106613","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-106613 — ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary…","description":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.","indicators":{"cves":["CVE-2026-106613","CVE-2026-106619","CVE-2026-75995"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:30.470Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-49950","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-49950 — Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows…","description":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which tr…","indicators":{"cves":["CVE-2026-49950"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:39.007Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/backends/communication/socket.py#L99-L104","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/serialization/core.pyx#L260","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/xorbits-xoscar-unauthenticated-deserialization-rce-via-actor-pool","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/blog/xorbits-xoscar-unauth-cloudpickle-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-90530","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-90530 — ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path…","description":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Explo…","indicators":{"cves":["CVE-2026-90530"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:57.273Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://guides.adobe.com/coldfusion/en/docs/coldfusion-tools/security-remote-development-services-rds.html","label":"psirt@adobe.com","domainType":"other"},{"url":"https://guides.adobe.com/coldfusion/en/docs/install-and-configure-coldfusion/installing-the-server-configuration.html","label":"psirt@adobe.com","domainType":"other"},{"url":"https://helpx.adobe.com/coldfusion/configuring-administering/administering-coldfusion-security.html","label":"psirt@adobe.com","domainType":"other"},{"url":"https://www.adobe.com/cc-shared/assets/pdf/products/coldfusion-family/coldfusion-2025-lockdown-guide-1-1.pdf","label":"psirt@adobe.com","domainType":"other"},{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"},{"url":"https://www.stigviewer.com/stigs/adobe_coldfusion/2026-05-13/finding/V-279042","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93895","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-93895 — IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticate…","description":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.","indicators":{"cves":["CVE-2026-93895"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:57.743Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292228","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93909","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-93909 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentica…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.","indicators":{"cves":["CVE-2026-93909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:57.977Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292236","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110136","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110136 — Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute a…","description":"Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","indicators":{"cves":["CVE-2026-110136","CVE-2026-110147"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:33.330Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568719364","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570050928","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110142","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110142 — Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to ex…","description":"Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","indicators":{"cves":["CVE-2026-110142"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:33.993Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/553525515","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110149","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110149 — Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execu…","description":"Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","indicators":{"cves":["CVE-2026-110149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:34.737Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568437149","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110152","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110152 — Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote atta…","description":"Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","indicators":{"cves":["CVE-2026-110152"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:35.077Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/567736859","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110159","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110159 — Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker…","description":"Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:35.833Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/564573066","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110161","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110161 — Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execu…","description":"Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)","indicators":{"cves":["CVE-2026-110161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:36.050Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568826881","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110165","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110165 — Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attack…","description":"Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","indicators":{"cves":["CVE-2026-110165"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:36.480Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568827293","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97381","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-97381 — Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1…","description":"Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the per…","indicators":{"cves":["CVE-2026-97381"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:19:45.427Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/LegacyUpdate/LegacyUpdate/commit/7d62f0bfaa770d74cd6e2cb0bac9c1907df48033","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LegacyUpdate/LegacyUpdate/commit/ae1c46c97f39a55a1937784d9f9beb30aa9147fd","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LegacyUpdate/LegacyUpdate/releases/tag/v1.13.2.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LegacyUpdate/LegacyUpdate/security/advisories/GHSA-f4g7-4gmx-jfgf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://legacyupdate.net/news/2026/07/21/legacy-update-1-13-2","label":"security-advisories@github.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110385","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110385 — A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an…","description":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Document Builder API improperly processes user-controlled convert…","indicators":{"cves":["CVE-2026-110385"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T01:17:06.337Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110392","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110392 — Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi…","description":"Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.","indicators":{"cves":["CVE-2026-110392","CVE-2026-16741","CVE-2026-108743"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:16:59.653Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/Samsung/qaboard/commit/05789e67c5d022f2403b9340fc8d82dc99dc3707","label":"PSIRT@samsung.com","domainType":"primary"},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1327","label":"iletisim@usom.gov.tr","domainType":"other"},{"url":"https://lists.apache.org/thread.html/6x2v755lrxf72xcrzjq4t2b1sd56ywb7","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/12","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92097","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-92097 — The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution i…","description":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_field()-filtered $_SERVER['REQUEST_URI'] on archive pa…","indicators":{"cves":["CVE-2026-92097"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:17:01.397Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/click-to-chat-for-whatsapp/tags/4.44/new/inc/greetings/class-ht-ctc-chat-greetings.php#L111","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/click-to-chat-for-whatsapp/tags/4.44/new/inc/greetings/class-ht-ctc-chat-greetings.php#L224","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/click-to-chat-for-whatsapp/tags/4.44/new/inc/greetings/greetings-1.php#L22","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/click-to-chat-for-whatsapp/tags/4.44/new/inc/greetings/greetings-2.php#L18","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3716433/click-to-chat-for-whatsapp/trunk/new/inc/greetings/greetings-1.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cf625e34-1f51-42a3-8daa-a5188dea226e?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93388","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-93388 — The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticat…","description":"The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all versions up to, and including, 2.9.1 The nbdesigner_copy_image_from_url AJAX action is registered for logged-out callers (wp_ajax_nopri…","indicators":{"cves":["CVE-2026-93388"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:17:01.720Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3716244/printcart-integration/trunk/includes/class.nbdesigner.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3716244%40printcart-integration%2Ftags%2F2.9.2&old=3715643%40printcart-integration%2Ftags%2F2.9.1","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/788461ba-2cf2-49d2-bbaa-a02de15f33ae?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110002","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110002 — The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all vers…","description":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combi…","indicators":{"cves":["CVE-2026-110002"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:20.220Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/snazzy-cacheable-facebook-feed/trunk/functions/save-to-cache.php#L311","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/snazzy-cacheable-facebook-feed/trunk/functions/save-to-cache.php#L315","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/snazzy-cacheable-facebook-feed/trunk/functions/save-to-cache.php#L328","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/snazzy-cacheable-facebook-feed/trunk/functions/save-to-cache.php#L70","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/98dd1333-81ee-4036-a738-03a3f0a0022d?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110447","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110447 — Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows r…","description":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't run…","indicators":{"cves":["CVE-2026-110447"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:20.683Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/CollaboraOnline/richdocumentscode/issues/354","label":"cve@mitre.org","domainType":"primary"},{"url":"https://help.nextcloud.com/t/to-collabora-built-in-user-update-asap/250516","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97657","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-97657 — The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass v…","description":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including, 10.8.0. This is due to the use of MAC-free AES-CTR encryption for cart-recovery link tokens — where the 8-byte CTR non…","indicators":{"cves":["CVE-2026-97657"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:37.657Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.tychesoftwares.com/docs/docs/abandoned-cart-pro-for-woocommerce-new/changelog-abandoned-cart-pro/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.tychesoftwares.com/products/woocommerce-abandoned-cart-pro-plugin/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b25b4aed-94b2-4c16-8e4e-39aec4e5e22a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97668","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-97668 — The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the g…","description":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the upda…","indicators":{"cves":["CVE-2026-97668"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:37.797Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.tychesoftwares.com/docs/docs/abandoned-cart-pro-for-woocommerce-new/changelog-abandoned-cart-pro/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.tychesoftwares.com/products/woocommerce-abandoned-cart-pro-plugin/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d91ffee-6902-4553-af3b-8ef4e5199367?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104800","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104800 — The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and…","description":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with un…","indicators":{"cves":["CVE-2026-104800"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:12.563Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-site-age-gate/trunk/admin.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-site-age-gate/trunk/agegate.php#L161","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-site-age-gate/trunk/main.php#L213","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-site-age-gate/trunk/main.php#L279","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-site-age-gate/trunk/main.php#L291","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-site-age-gate/trunk/main.php#L325","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-site-age-gate/trunk/nonwp.php#L20","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/05db28b4-a3de-402d-bc5b-06d5347d6724?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87855","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-87855 — The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all…","description":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient fi…","indicators":{"cves":["CVE-2026-87855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:52.840Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/src/Controllers/ImageController.php#L632","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Application/Application.php#L424","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Application/Application.php#L885","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Application/Application.php#L955","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ed869c1e-ae54-4db2-8147-39050a034c5e?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107594","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107594 — The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path take…","description":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server…","indicators":{"cves":["CVE-2026-107594"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:02.090Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/bcd5538b-0ad4-4311-b3b6-3fb89d4caa76/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89310","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89310 — A parameter taken from the request body is inserted into a T-SQL statement without parameterization…","description":"A parameter taken from the request body is inserted into\na T-SQL statement without parameterization or escaping, allowing\na remote attacker to execute arbitrary SQL statements in the context of the\napplication's database account.","indicators":{"cves":["CVE-2026-89310"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:04.650Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.jtl-software.com/de/cve-2026-89309-cve-2026-89310","label":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100163","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-100163 — The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPres…","description":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::create_wp_user_for_customer() helper reached from the public process_step_customer() booking…","indicators":{"cves":["CVE-2026-100163","CVE-2026-103366","CVE-2026-103380","CVE-2026-110653","CVE-2026-111602"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:02.257Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.2/latepoint.php#L1072","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.2/lib/helpers/customer_helper.php#L259","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.2/lib/helpers/customer_helper.php#L274","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.2/lib/helpers/steps_helper.php#L2146","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.2/lib/helpers/steps_helper.php#L2156","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/helpers/customer_helper.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2a942d71-7172-4e02-9faa-3a2c1c9e7fbd?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/latepoint.php#L1072","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/controllers/steps_controller.php#L145","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/controllers/steps_controller.php#L290","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/helpers/steps_helper.php#L1232","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/helpers/steps_helper.php#L234","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/helpers/steps_helper.php#L3228","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/models/model.php#L580","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3728691%40latepoint&new=3728691%40latepoint","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f13d1ac-d1b4-4802-bee2-3622e84d7482?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/controllers/customer_cabinet_controller.php#L321","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/helpers/replacer_helper.php#L278","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/helpers/replacer_helper.php#L614","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/mailers/customer_mailer.php#L33","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.3/lib/models/customer_model.php#L388","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4494960c-66ed-47d9-b3fc-5a5ec5a07b1f?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/auth_controller.php#L14","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/auth_controller.php#L30","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/otp_helper.php#L185","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/otp_helper.php#L228","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/models/model.php#L773","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.5/lib/helpers/otp_helper.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/61fbc1dd-06c9-409b-8cad-3f350b38dfc3?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/steps_controller.php#L355","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/params_helper.php#L14","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/steps_helper.php#L1175","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/models/model.php#L379","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.5/lib/controllers/steps_controller.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6afce24f-30cd-4aeb-a5dd-20bd80a75779?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104748","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104748 — The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for Wor…","description":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_register` AJAX action lacking any capability check for role a…","indicators":{"cves":["CVE-2026-104748"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:02.997Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.svn.wordpress.org/simple-form/trunk/","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Assets.php#L265","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Integrations/WordPressAuth.php#L184","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Integrations/WordPressAuth.php#L291","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/simple-form/tags/3.10.0/app/Integrations/WordPressAuth.php#L32","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3726513/simple-form/trunk/app/Integrations/WordPressAuth.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b2b973fe-1209-43dc-b2a3-74086b12fe97?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103904","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-103904 — The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitor…","description":"The public consent endpoint of JTL-Shop accepts arbitrary\nconsent names from unauthenticated visitors without validating\nthem against the configured consent items. These names are stored in the consent\nstatistics and rendered without output encoding in the administration\nbackend. An unauthenticated…","indicators":{"cves":["CVE-2026-103904"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:58.903Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.jtl-software.com/de/security/sicherheitsluecke-shop-xss/","label":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107424","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107424 — Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboa…","description":"Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a through 3.0.7.","indicators":{"cves":["CVE-2026-107424"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:23.453Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/frontend-dashboard/vulnerability/wordpress-frontend-dashboard-plugin-3-0-7-privilege-escalation-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108291","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-108291 — Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injec…","description":"Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.","indicators":{"cves":["CVE-2026-108291"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:24.633Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/affiliates/vulnerability/wordpress-affiliates-plugin-7-0-1-php-object-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16740","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-16740 — Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on vi…","description":"Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection.\n\nThis issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 befo…","indicators":{"cves":["CVE-2026-16740"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:27.977Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1327","label":"iletisim@usom.gov.tr","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108065","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-108065 — SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Softw…","description":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID param…","indicators":{"cves":["CVE-2026-108065"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:33.813Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-unauthenticated-sql-injection-in-channel-software-weballiance-ecommerce/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98395","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98395 — In the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit\n\nWhen __replay_soft_interrupts() replays a pending interrupt (e.g.\nPACA_IRQ_DEC -> timer_interrupt), it calls the handler directly with a\nsynthetic pt_regs. The…","indicators":{"cves":["CVE-2026-98395"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.407Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/63a7531ca31f9f097d9cc1cc3fe86ae683cdabdd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/95cd316a896f1c1aa4ee4a817ba3d4691103c81b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98396","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98396 — In the Linux kernel, the following vulnerability has been resolved: powerpc: Do not restore KUAP in…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()\n\nKUAP means kernel cannot touch user memory unless it explicitly is\nenabled. In the kernel it should stay AMR_KUAP_BLOCKED. While returning\nto userspace just before R…","indicators":{"cves":["CVE-2026-98396"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.530Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/c2549d749539487239475fbc8c614a1f9244d655","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c8e80c19c3b9c8db83a14fab00445a6064992442","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110612","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110612 — vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated atta…","description":"vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on vl…","indicators":{"cves":["CVE-2026-110612"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:13.187Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/wwwlike/vlife","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wwwlike/vlife/blob/4f03b19b91d82781939653f5b0d9a70721734d6d/vlife-base/src/main/java/cn/wwwlike/config/VlifeUrlDecisionManager.java#L25","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wwwlike/vlife/blob/4f03b19b91d82781939653f5b0d9a70721734d6d/vlife-boot-starter-web/src/main/java/cn/wwwlike/web/security/filter/TokenUtil.java#L33-L58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/vlife-hardcoded-jwt-secret-token-forgery","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/vlife-through-2.0.1-authentication-bypass-via-hardcoded-jwt-secret-in-tokenutil","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/vlife-hardcoded-jwt-secret-token-forgery","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110631","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110631 — Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that all…","description":"Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_public_keys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to iss…","indicators":{"cves":["CVE-2026-110631"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:15.983Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/moghtech/komodo/blob/v1.19.5/bin/periphery/src/api/router.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/connection/server.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/state.rs#L82-L88","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/moghtech/komodo/blob/v2.3.3/config/periphery.config.toml","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/moghtech/komodo/issues/1690","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://ravindulakmina.pages.dev/advisories/komodo-periphery-fail-open-rce/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/komodo-through-2.3.3-periphery-agent-unauthenticated-rce-via-default-configuration","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://ravindulakmina.pages.dev/advisories/cve-2026-110631-komodo-periphery-fail-open-rce/","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110634","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110634 — git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execut…","description":"git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtick substitutions that shelljs.exec evaluates, running command…","indicators":{"cves":["CVE-2026-110634"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:16.417Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/danday74/git-diff","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/danday74/git-diff/blob/a85a649badc4c6bba991e87e82382b7d3cdd6634/js/gitDiffReal/generateDiff/index.js#L26-L30","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/danday74/git-diff/commit/bfd727b6cf1daa671c3528d1d681f55b70e8fb19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/danday74/git-diff/pull/16","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/git-diff-before-2.0.7-os-command-injection-via-gitdiff-input-strings","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110635","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110635 — webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js h…","description":"webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell metacharacters…","indicators":{"cves":["CVE-2026-110635"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:16.560Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/scionoftech/webp-converter","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/scionoftech/webp-converter/blob/3729b65f1e904ab56b947ac3772020ce37a756c8/src/webpconverter.js#L41-L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/scionoftech/webp-converter/blob/e09d963d772cae9ff6af63c268ca838ab334f861/CHANGELOG.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/scionoftech/webp-converter/commit/f1b6724bc2e89f67ab05d51a854b4b1c5a99928a","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/scionoftech/webp-converter/pull/53","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/scionoftech/webp-converter/pull/53#issuecomment-5091652605","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/webp-converter-before-3.0.0-os-command-injection-via-file-names-and-options","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110636","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110636 — pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(…","description":"pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths. Attackers controlling pdf_path or out_file can inject shell metacharacters interpreted by subprocess.Popen with shell=Tru…","indicators":{"cves":["CVE-2026-110636"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:16.710Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/revolunet/pypdftk","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/revolunet/pypdftk/blob/1d3b40c3b42fb3cc6b0192d34aba2c21a1efd369/pypdftk.py#L87-L123","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/revolunet/pypdftk/issues/56","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/revolunet/pypdftk/pull/57","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/pypdftk-through-0.5-os-command-injection-via-pdf-and-output-paths","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/revolunet/pypdftk/issues/56","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110638","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110638 — doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to exec…","description":"doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers can embed $(...) or backtick command substitution in the file path, which DocData._readPDF passes to a shell-based pdfto…","indicators":{"cves":["CVE-2026-110638"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:16.997Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/zepspaiva/doc-recog","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zepspaiva/doc-recog/blob/96d31957fbc2a31f1d739e2d64e5c85a05f688ec/docdata.js#L69-L74","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zepspaiva/doc-recog/pull/2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/doc-recog-through-1.1.6-os-command-injection-via-docdata-readpdf-file-path","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110639","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110639 — @mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to…","description":"@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir options. Attackers controlling these values passed to extract() can inject commands into unquoted shelljs exec() strings…","indicators":{"cves":["CVE-2026-110639"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:17.130Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/mborne/node-extract/blob/v0.2.0/src/extractor/unzip.js#L17-L19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mborne/node-extract/commit/585e5b29657379e73c04f6f950ea8dc5319f8ae1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mborne/node-extract/pull/8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mborne/node-extract/releases/tag/v0.2.1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/mborne-extract-before-0.2.1-os-command-injection-via-archivepath-and-targetdir","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110640","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110640 — Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to e…","description":"Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper(). Attackers can inject shell metacharacters or $() substitution into the command string built by createCppCo…","indicators":{"cves":["CVE-2026-110640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:17.277Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/ariym/whisper-node/blob/c72944cfa48f5c74662ff17ee2dc1d5f7624393e/src/whisper.ts#L58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ariym/whisper-node/blob/c72944cfa48f5c74662ff17ee2dc1d5f7624393e/src/whisper.ts#L8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ariym/whisper-node/pull/64","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://unpkg.com/whisper-node@1.1.1/dist/index.js","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/whisper-node-through-1.1.1-os-command-injection-via-filepath-and-language","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110643","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110643 — transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers…","description":"transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted audioPath values to transcribeAudio(). Attackers can inject $() or backtick substitution or a closing quote into the unescaped path passed to child_process.exe…","indicators":{"cves":["CVE-2026-110643"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:17.790Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/kky-ykk/Transcribe2texts/blob/7e82f96466fed9ccfc40f7b9e370321701b82c32/lib/index.js#L53-L55","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kky-ykk/Transcribe2texts/pull/1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/transcribe2texts-through-1.0.6-os-command-injection-via-transcribeaudio-audiopath","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110644","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110644 — nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() th…","description":"nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $() command substitution or closing quotes, which are interpolated into an ff…","indicators":{"cves":["CVE-2026-110644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:17.940Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/ChetanXpro/nodejs-whisper/blob/v0.3.1/src/utils.ts#L58-L59","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ChetanXpro/nodejs-whisper/blob/v0.3.1/src/utils.ts#L76-L77","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ChetanXpro/nodejs-whisper/pull/259","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nodejs-whisper-through-0.3.1-os-command-injection-via-converttowavtype","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110645","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110645 — Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attacker…","description":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell…","indicators":{"cves":["CVE-2026-110645"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:18.090Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videoconcat.js#L61","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ArsalanDotMe/VideoStitch/blob/f33560852c848fe572a79f45ae0e85a7bcb0d3b2/lib/videocut.js#L96-L99","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ArsalanDotMe/VideoStitch/commit/ba60353e6c3707e6ff5d89eb6d76c2c6cdb0df9b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ArsalanDotMe/VideoStitch/pull/26","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ArsalanDotMe/VideoStitch/tree/v2.0.0-beta.1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/video-stitch-before-2.0.0-beta.1-os-command-injection-via-concat-and-cut","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/ArsalanDotMe/VideoStitch/pull/26","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110649","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110649 — Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execut…","description":"Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can name a media file with $(...) or backticks to execute operating system commands with Node.js process privileges when ffmpeg, ffpro…","indicators":{"cves":["CVE-2026-110649"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:18.650Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/content/video.js#L58-L60","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shahkashani/stills/blob/66d5def1265b817d84524473a2813e4781dcbd80/lib/stills/frames.js#L106-L108","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shahkashani/stills/commit/51ba953983ba99915331607bf8530e6089952253","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shahkashani/stills/commit/5694b3b0dcd2da342f4f0497244129d4c9eb73bc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shahkashani/stills/pull/29","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shahkashani/stills/pull/30","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/stills-before-25.24.2-os-command-injection-via-media-file-names","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110650","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110650 — The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_…","description":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths. Attackers who control a file name passed to generate_thumbnail, such as an uploaded file, can inj…","indicators":{"cves":["CVE-2026-110650"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:18.793Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/anshulkharb/thumbnail/blob/23b2e30509c936872a3bafac65b4aa48777e794c/thumbnail/thumbnail.py#L100-L114","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/anshulkharb/thumbnail/pull/9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/thumbnail-through-1.5-os-command-injection-via-generate-thumbnail-file-paths","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/anshulkharb/thumbnail/pull/9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-59774","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-59774 — Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endp…","description":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files incl…","indicators":{"cves":["CVE-2026-59774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:20.677Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.1/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38642","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38645","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.1","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-6v53-hr58-556r","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"http://www.openwall.com/lists/oss-security/2026/08/10/3","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86002","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-86002 — Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-l…","description":"Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKER_ARGS and…","indicators":{"cves":["CVE-2026-86002"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:54.470Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/dokku/dokku/commit/1a376c362215a5c7044a08b3e3905b1a5fddc821","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dokku/dokku/pull/8848","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dokku/dokku/releases/tag/v0.38.25","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dokku/dokku/security/advisories/GHSA-fccf-j7qf-2xp9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-91881","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-91881 — Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Valid…","description":"Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized acces…","indicators":{"cves":["CVE-2026-91881"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:56.767Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000515444/dsa-2026-434-security-update-for-dell-terraform-provider-for-dell-server-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101950","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101950 — A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX…","description":"A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for…","indicators":{"cves":["CVE-2026-101950"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:47.877Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101956","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101956 — An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks J…","description":"An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary Junos commands with root privileges via the exposed J-Web web interface.","indicators":{"cves":["CVE-2026-101956"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:48.353Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101980","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101980 — An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo con…","description":"An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.","indicators":{"cves":["CVE-2026-101980"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:50.503Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101986","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101986 — An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved…","description":"An  Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.","indicators":{"cves":["CVE-2026-101986"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:50.953Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101990","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101990 — A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks…","description":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.","indicators":{"cves":["CVE-2026-101990","CVE-2026-102180","CVE-2026-33789","CVE-2026-33796","CVE-2026-101981","CVE-2026-101982"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:51.587Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102031","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102031 — An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-pr…","description":"An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.","indicators":{"cves":["CVE-2026-102031"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:56.617Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102175","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102175 — A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks…","description":"A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via a c…","indicators":{"cves":["CVE-2026-102175"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:05.147Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102178","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102178 — A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS a…","description":"A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enab…","indicators":{"cves":["CVE-2026-102178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:05.610Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102182","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102182 — A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX…","description":"A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets.\n\nThis issue affects Junos OS on MX Series:\n\n\n  *  All versions before 21.2R3-S11;…","indicators":{"cves":["CVE-2026-102182"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:06.080Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112196","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109439","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109439 — Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authe…","description":"Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to the unauthenticated UDP configuration protocol on port 30718.…","indicators":{"cves":["CVE-2026-109439"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:23.253Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://cdn.lantronix.com/wp-content/uploads/pdf/PCN-753-Rev-B-EOL-Notice-XPRESS.pdf?xnotes__c=I%20am%20interested%20in%20the%20XPress%20DR%20/%20XPress%20DR-IAP.","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/lantronix-xpress-dr-unauthenticated-configuration-write-via-udp-30718","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-33792","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-33792 — A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SR…","description":"A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.","indicators":{"cves":["CVE-2026-33792"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:27.933Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-67418","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-67418 — RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and…","description":"RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmq_mqtt/src/rabbit_mqtt_packet.erl accepts Request-Problem-Information on PUBLISH packets even though the property is valid only for CONNECT. An authenticated p…","indicators":{"cves":["CVE-2026-67418"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:30.760Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/4639a4318c72a0660e4bc014767fad70ce288fbc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/908f944a1d581d10774f8d6d0dcf2a1a713779fb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/17035","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/17287","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.3.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-jv99-v328-mvmm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77524","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77524 — KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a name…","description":"KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resources can set hashiCorpVault.address to a tenant-controlled endpoint and select Kubernetes authentication without an expli…","indicators":{"cves":["CVE-2026-77524"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:19:11.147Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/kedacore/keda/releases/tag/v2.21.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101954","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101954 — An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session h…","description":"An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTT…","indicators":{"cves":["CVE-2026-101954"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:11.277Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101983","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101983 — A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Ju…","description":"A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.","indicators":{"cves":["CVE-2026-101983"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:13.293Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108390","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-108390 — Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.…","description":"Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, update_object_value() in func/main.sh does not escape single quotes when writing a custom document-root value to a user's web.conf file, allowing a low-privileged authenticated pan…","indicators":{"cves":["CVE-2026-108390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:27.180Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/hestiacp/hestiacp/commit/4d86018660f35a1d64a0ae819bc5ee700949a287","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/hestiacp/hestiacp/security/advisories/GHSA-r9q4-pmcm-5qqf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://ravindulakmina.pages.dev/advisories/cve-2026-108390-hestiacp-apostrophe-to-root","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/hestiacp/hestiacp/security/advisories/GHSA-r9q4-pmcm-5qqf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55572","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55572 — e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and…","description":"e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username directly into SQL in e107_plugins/alt_auth/otherdb_auth.php and e107_plugins/alt_auth/e107db_auth.php. The login() methods exec…","indicators":{"cves":["CVE-2026-55572"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:37.863Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/e107inc/e107/commit/120bd4bdbe18c8690c60a007ad6716e52e6ee965","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/e107inc/e107/releases/tag/v2.3.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/e107inc/e107/security/advisories/GHSA-5f75-c25x-59wx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55573","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55573 — e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controll…","description":"e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps POST parameter and passes it to unserialize() at file scope and again in the e_install constructor without restricting allowed classes. The installer remains accessible after a norma…","indicators":{"cves":["CVE-2026-55573"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:38.013Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/e107inc/e107/commit/5d6d649e8cf01854d6024d07997c2449fdd75f24","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/e107inc/e107/commit/6c404295213952aedb9b3689be19dd4c7ba550b0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/e107inc/e107/releases/tag/v2.3.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/e107inc/e107/security/advisories/GHSA-c8h6-wpj3-4cr8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/e107inc/e107/security/advisories/GHSA-c8h6-wpj3-4cr8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102471","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102471 — In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the…","description":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\\r) or LF (\\n) characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or…","indicators":{"cves":["CVE-2026-102471","CVE-2026-102465","CVE-2026-102467","CVE-2026-102461","CVE-2026-102462","CVE-2026-102463","CVE-2026-102464","CVE-2026-102466","CVE-2026-102469","CVE-2026-103223","CVE-2026-103224"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:05.180Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/vert-x3/vertx-mail-client/security/advisories/GHSA-rm5c-2c7f-gc5g","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/348","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/vert-x3/vertx-redis-client/security/advisories/GHSA-4wf9-p5hg-98w5","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/343","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-h722-h6c2-6j3c","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/341","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vertx-json-schema/security/advisories/GHSA-4m87-8qfr-8p8m","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/340","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vertx-sql-client/security/advisories/GHSA-fg6c-83v6-vhq4","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/346","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vertx-sql-client/security/advisories/GHSA-xqmh-8fhj-48fp","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/345","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/vert-x3/vertx-mqtt/security/advisories/GHSA-46xj-5735-6qrp","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/344","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vertx-sql-client/security/advisories/GHSA-9jxp-x3fr-ffqh","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/342","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vertx-sql-client/security/advisories/GHSA-j4vf-w939-pgxf","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/347","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vertx-sql-client/security/advisories/GHSA-hm2j-xp3c-jff2","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/354","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-vertx/vertx-sql-client/security/advisories/GHSA-75hv-9xj3-3cr8","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/353","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110536","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110536 — A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the f…","description":"A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been pu…","indicators":{"cves":["CVE-2026-110536"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:10.610Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/Walnut1337/Command-Injection-DIR-868L/blob/main/ADVISORY.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Walnut1337/Command-Injection-DIR-868L/tree/main/poc","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110536","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003692","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003693","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419825","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419825/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.dlink.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85714","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85714 — Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. P…","description":"Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and security mode can upload a crafted SQL file to POST /api/v1/database/import-database. DatabaseService.validateSqlConten…","indicators":{"cves":["CVE-2026-85714"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:22.050Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/Stirling-Tools/Stirling-PDF/commit/d06d3cabaf5b8a7dcd0dbfc584828d8e687e5dd5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Stirling-Tools/Stirling-PDF/pull/6796","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Stirling-Tools/Stirling-PDF/releases/tag/v2.13.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-mrr8-934j-4g8m","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-mrr8-934j-4g8m","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55680","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55680 — WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to…","description":"WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression in the codigo parameter, which extract($_REQUEST) passes into the WHERE codigo= clause of an UPDATE statement without va…","indicators":{"cves":["CVE-2026-55680"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:50.193Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/f819be361f984592c4b5a35db830495b4e2263fa","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/184","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fxcc-q2j6-w2rf","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55683","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55683 — WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/soc…","description":"WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly incorporates valor, valor_pago, id_pessoa, id_socio, and id_sociotipo into UPDATE, INSERT, and SELE…","indicators":{"cves":["CVE-2026-55683","CVE-2026-55684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:50.640Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/f819be361f984592c4b5a35db830495b4e2263fa","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/184","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vjxh-wcf9-4qgq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/38cb19baeee90b334817fb9b40f967996c9ee36b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/183","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g2hm-m6gw-fcgg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110862","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110862 — Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that all…","description":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state to…","indicators":{"cves":["CVE-2026-110862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:27.673Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/better-auth/better-auth/security/advisories/GHSA-965c-763c-88jm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/better-auth-1.4.0-beta.18-before-1.7.7-authentication-bypass-via-magic-link","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110911","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110911 — Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again…","description":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey a…","indicators":{"cves":["CVE-2026-110911"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T04:18:22.813Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-96rm-h22v-925x","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108587","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-108587 — The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is…","description":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the page_id p…","indicators":{"cves":["CVE-2026-108587","CVE-2026-103896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T05:17:02.637Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.1/vendor/10web-utils/10web-queue/src/TenWebQueue/Traits/QueueRestart.php#L63","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.1/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/CompressService.php#L99","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.1/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/Rest.php#L310","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.1/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/Rest.php#L99","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.1/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/Utils.php#L161","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/vendor/10web-utils/10web-queue/src/TenWebQueue/Traits/QueueRestart.php#L63","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/CompressService.php#L99","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/Rest.php#L310","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/Rest.php#L99","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/vendor/10web-utils/tenweb-image-optimizer/src/TenWebIO/Utils.php#L161","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743299/tenweb-speed-optimizer","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/adfd97cf-8f61-463d-a535-1a61e3c2e134?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/includes/WebPageCache/OptimizerWebPageCache.php#L190","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/includes/WebPageCache/OptimizerWebPageCache.php#L205","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/includes/WebPageCache/OptimizerWebPageCache.php#L312","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.5/includes/WebPageCache/OptimizerWebPageValidations.php#L299","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tenweb-speed-optimizer/tags/2.34.8","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83e672e7-2483-46e9-ae16-a9e7ccc4bcb8?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101306","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101306 — SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transfe…","description":"SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred.  A process could clear the restriction by sending the descriptor to itself over a Unix domain socket.\n\nA process in a jail that has received a directory file descriptor from another jail can use…","indicators":{"cves":["CVE-2026-101306"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.780Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:66.jail.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101307","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-101307 — When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeate…","description":"When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter.  Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-length allocation followed by a copy of the existing samples into the undersized buffer.  A remote peer can trigger the expans…","indicators":{"cves":["CVE-2026-101307"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.890Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:70.tcp.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109145","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109145 — The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its…","description":"The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated attackers to register an administrator-e…","indicators":{"cves":["CVE-2026-109145"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.617Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://wpscan.com/vulnerability/62aa4b8c-b9f5-44f4-ac5a-220c14eb719a/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-72528","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-72528 — \"Handmade Marketplace App - Creema\" provided by CREEMA LTD. contains an open redirect vulnerability.…","description":"\"Handmade Marketplace App - Creema\" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.","indicators":{"cves":["CVE-2026-72528"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:17.993Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://apps.apple.com/jp/app/id916614208","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://jvn.jp/en/jp/JVN48627289/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://play.google.com/store/apps/details?id=jp.creema.creema_android&hl=ja","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109694","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109694 — Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Priv…","description":"Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.","indicators":{"cves":["CVE-2026-109694","CVE-2026-109693"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:17:24.537Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/fluent-crm/vulnerability/wordpress-fluent-crm-plugin-3-2-5-privilege-escalation-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/fluent-crm/vulnerability/wordpress-fluent-crm-plugin-3-2-5-privilege-escalation-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104025","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104025 — Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZ…","description":"Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the \"Preview with... -> Associated application\" action (Shift+Ctrl+O) to execute…","indicators":{"cves":["CVE-2026-104025"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:10.617Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cf","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"primary"},{"url":"https://secur0.com/en/cna/cve-list/cve-2026-104025-path-traversal-in-peazip-object-preview","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109686","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109686 — Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper a…","description":"Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.","indicators":{"cves":["CVE-2026-109686"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:11.540Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-9-7-php-object-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109892","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109892 — Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-front…","description":"Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13.","indicators":{"cves":["CVE-2026-109892"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:12.697Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-plugin-3-29-13-privilege-escalation-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-99999","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-99999 — In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start be…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and rep…","indicators":{"cves":["CVE-2026-99999"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:14.137Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://pwn.ai/blog/pwnescape","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/15/5","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110957","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110957 — A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element i…","description":"A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTE_ADDR leads to os command injection. It is possible to initiate the attack remote…","indicators":{"cves":["CVE-2026-110957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:30.640Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://dl.wavlink.com/firmware/RD/WN530BE2_WAVLINK-WO-2026-09-24-841a51c6d5_tclinux.bin","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/F-yyjy/cve/blob/main/WN530BE2-A_api-cgi.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110957","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/920217","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420570","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420570/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-46691","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-46691 — EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authentic…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can send POST /api/v1/Import/{id}/exportErrors with another user's import identifier and retrieve an attachment identifier for a CSV containing rows from that import…","indicators":{"cves":["CVE-2026-46691","CVE-2026-47168"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:34.440Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/71ad7661215d25f7d0f2756c8e8dbc257cad848f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-rrcj-rhc2-ch5q","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/commit/f48d1d26ffa05eac07ef72bb7f00f67a851184e1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-7q78-jjr9-mqcg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110958","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110958 — A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown f…","description":"A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to vers…","indicators":{"cves":["CVE-2026-110958"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:48.467Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://dl.wavlink.com/firmware/RD/WN530BE2_WAVLINK-WO-2026-09-24-841a51c6d5_tclinux.bin","label":"cna@vuldb.com","domainType":"other"},{"url":"https://drive.google.com/file/d/12OOh8g9YDCbD-Q4cc52J6TH9KuOoD44A/view?usp=drive_link","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-110958","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/933388","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420571","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420571/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-57155","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-57155 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Al…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV country_code value to construct output filenames below /usr/local/s…","indicators":{"cves":["CVE-2026-57155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:17.300Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/c46aced9c47d956167e294911113bc334fea5f48","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/e7fbfaa7f5e070da667e3f243da11fd3d4b731fa","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-wjqq-rfmm-v5h3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://hackerask.com/posts/opnsense","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-wjqq-rfmm-v5h3","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110812","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110812 — Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engin…","description":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials.\n\n\n\nTo remediate this issue, users not enrolled in auto…","indicators":{"cves":["CVE-2026-110812"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:16.110Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-136-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.7.1.html","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.8.1.html","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.5.0.0.html","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111105","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111105 — Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows r…","description":"Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal…","indicators":{"cves":["CVE-2026-111105"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:26.670Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-757/","label":"zdi-disclosures@trendmicro.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84731","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-84731 — An unauthenticated remote attacker can bypass authentication and gain full access to administrative…","description":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters.\n\n\n\nConsequ…","indicators":{"cves":["CVE-2026-84731"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:29.960Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://download.nutanix.com/alerts/Security_Advisory_0058.pdf","label":"2ffdacf6-8681-47df-b023-4f11abd61c1d","domainType":"other"},{"url":"https://portal.nutanix.com/page/documents/list?type=software&filterKey=software&filterVal=AOS","label":"2ffdacf6-8681-47df-b023-4f11abd61c1d","domainType":"other"},{"url":"https://www.nutanix.com/support","label":"2ffdacf6-8681-47df-b023-4f11abd61c1d","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102946","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102946 — joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry…","description":"joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.4, joserfc.jws.deserialize_json() accepts a JWS General JSON Serialization with an empty signatures array as authenticated. The verify_general_json() loop performs…","indicators":{"cves":["CVE-2026-102946"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:13.423Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/authlib/joserfc/commit/f409f8f058225d7686acab6546c94593e4c1bfbe","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/authlib/joserfc/releases/tag/1.7.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/authlib/joserfc/security/advisories/GHSA-4pp3-559j-c5c2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/authlib/joserfc/security/advisories/GHSA-4pp3-559j-c5c2","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111235","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111235 — An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridia…","description":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/** Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no…","indicators":{"cves":["CVE-2026-111235"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:36.693Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/OpenNMS/opennms/pull/8934","label":"security@opennms.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55239","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-55239 — Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29,…","description":"Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql() by interpolating the timezone request value without parameter binding. The timezone value can reach a…","indicators":{"cves":["CVE-2026-55239","CVE-2026-55240"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:40.143Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/msgbyte/tianji/commit/132ff67907df897d222829ea8ad1a018ff74df48","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/msgbyte/tianji/releases/tag/v1.31.29","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/msgbyte/tianji/security/advisories/GHSA-v9jm-vvrj-53c4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/msgbyte/tianji/security/advisories/GHSA-5grg-j3cr-3hpm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57496","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-57496 — NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage…","description":"NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensing_get_product passes the caller-controlled product_number to src/netlicensing_mcp/tools/products.py, which interpola…","indicators":{"cves":["CVE-2026-57496"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:41.733Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Labs64/NetLicensing-MCP/commit/b8fd0ea76d533202573eb24add9fb2fbd9331496","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Labs64/NetLicensing-MCP/pull/6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Labs64/NetLicensing-MCP/releases/tag/0.1.8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Labs64/NetLicensing-MCP/security/advisories/GHSA-hxpf-9xvq-wph8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105032","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105032 — The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and pr…","description":"The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files, and thereby tamper wit…","indicators":{"cves":["CVE-2026-105032"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:03.753Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001011111111110011111111110000000000000000000000000000000000000000000000000000001100/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105037","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105037 — EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-…","description":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.","indicators":{"cves":["CVE-2026-105037"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:04.350Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000110111111111111111110000000000000000000011111100011111111110000000000000000000011111111111111000000000000000000010001/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105038","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105038 — The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model adminis…","description":"The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.","indicators":{"cves":["CVE-2026-105038"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:04.467Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105039","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105039 — EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on…","description":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.","indicators":{"cves":["CVE-2026-105039"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:04.587Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000111111111111111111111000000000000000000011111100111111111111000000000000000000011111111111111101010000000000000010011/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110916","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110916 — Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attack…","description":"Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","indicators":{"cves":["CVE-2026-110916"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:26.943Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/501886301","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111281","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111281 — Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution…","description":"Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen auths…","indicators":{"cves":["CVE-2026-111281"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:29.457Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://rahulr.in/reversing-a-cheap-ip-camera-to-root/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/jooan-ja-a12-unauthenticated-root-rce-via-setdiagmode-hard-coded-credentials","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111283","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111283 — BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability…","description":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary p…","indicators":{"cves":["CVE-2026-111283"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:29.747Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://docs.helixops.ai/bin/IT-Operations-Management/Operations-Management/BMC-Helix-Network-Management/NetworkManagement/Release-Notes/On-prem-Release-Notes/BMC-Helix-Network-Management-26-3-01-On-prem-Release-Notes/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/cybliminal/cve-2026-111283-bmc-helix-network-management-local-administrator-any-password","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/bmc-helix-network-management-before-26.3.01-authentication-bypass-via-saml-configuration","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111322","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111322 — Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthentic…","description":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execut…","indicators":{"cves":["CVE-2026-111322"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:30.633Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/coleam00/Archon","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coleam00/Archon/blob/v0.11.1/packages/server/src/auth/config.ts#L25-L27","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coleam00/Archon/blob/v0.11.1/packages/server/src/index.ts#L909","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coleam00/Archon/blob/v0.11.1/packages/server/src/routes/api.ts#L1749-L1756","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/archon-os-api-missing-authentication-default","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/archon-0.2.13-through-0.11.1-missing-authentication-via-api-control-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/archon-os-api-missing-authentication-default","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111329","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111329 — JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow un…","description":"JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant application…","indicators":{"cves":["CVE-2026-111329"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:31.063Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/juggleim/im-server","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/juggleim/im-server/blob/v1.8.16/sql/imserver.sql#L988","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/juggleim/imserver-console/blob/v1.0.10/services/accountservice.go#L77-L96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/juggleim-im-server-default-admin-credential","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/juggleim-im-server-through-1.8.16-default-admin-credentials-in-admin-console","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/juggleim-im-server-default-admin-credential","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94134","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-94134 — The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key…","description":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle pos…","indicators":{"cves":["CVE-2026-94134"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:21:12.023Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/apache/airflow/pull/73419","label":"security@apache.org","domainType":"primary"},{"url":"https://lists.apache.org/thread/ksr1lztvd3zr74f8xd1hzch1ssl0l3lj","label":"security@apache.org","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-94135","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111444","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111444 — Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKS…","description":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings t…","indicators":{"cves":["CVE-2026-111444"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:30.353Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-mvr9-2h5x-w6cq","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104798","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104798 — The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalatio…","description":"The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.8.7. The public `mcs` GET parameter is reflected into post content unsanitized before WordPress core's `do_shortcode` filter runs, allowing an unauthenticated…","indicators":{"cves":["CVE-2026-104798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:28.580Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.8.6/my-calendar-navigation.php#L248","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.8.6/my-calendar-navigation.php#L260","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.8.6/my-calendar-output.php#L1622","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.8.6/my-calendar-search.php#L170","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.8.6/my-calendar-search.php#L221","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/my-calendar/tags/3.8.6/my-calendar-shortcodes.php#L102","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3746389%40my-calendar&new=3746389%40my-calendar","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8aa6ee7-525e-4458-9f5b-1e729afe448c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109219","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109219 — The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, an…","description":"The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on the attacker-supplied image_path parameter, whose basename-derived file name bypasses the exten…","indicators":{"cves":["CVE-2026-109219"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:29.100Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/api/mb-board.php#L428","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/includes/functions/func.api.php#L902","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/includes/functions/func.api.php#L903","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/includes/functions/func.api.php#L972","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/includes/mb-actions.php#L520","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743247/mangboard/trunk/includes/functions/func.api.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/mangboard/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e4f4860-b4c9-4f41-b1d0-0b2da8c88b99?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109515","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109515 — The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin fo…","description":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the `subscribe_to_email_list` endpoint accepting an attacker-supplied `optin_data[form_c…","indicators":{"cves":["CVE-2026-109515"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:29.597Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/mailoptin/tags/1.2.78.5/src/connections/WordPressUserRegistrationConnect/Subscription.php#L68","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mailoptin/tags/1.2.78.5/src/core/src/AjaxHandler.php#L699","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mailoptin/tags/1.2.78.5/src/core/src/Connections/AbstractConnect.php#L84","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3744644/mailoptin/trunk/src/connections/WordPressUserRegistrationConnect/Subscription.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3744644%40mailoptin%2Ftrunk&old=3738326%40mailoptin%2Ftrunk#file4","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/96111116-6b6f-42fc-98d8-6f5c27dc3c1c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103768","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-103768 — The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitr…","description":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possible f…","indicators":{"cves":["CVE-2026-103768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:03.060Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3733037/elex-helpdesk-customer-support-ticket-system/trunk/includes/Mailbox.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3733037%40elex-helpdesk-customer-support-ticket-system%2Ftags%2F3.3.8&old=3538729%40elex-helpdesk-customer-support-ticket-system%2Ftags%2F3.3.7","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8e8129b6-cc1d-4fdc-81a7-b0c8c3d1c308?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89079","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-89079 — The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover i…","description":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to ch…","indicators":{"cves":["CVE-2026-89079"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:12.410Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3696081/theme-my-login","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53c548be-b8aa-4949-93f8-7b4d73688540?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104730","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104730 — The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPre…","description":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Objec…","indicators":{"cves":["CVE-2026-104730"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:08.267Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/sunshine-photo-cart/tags/3.7.3/includes/class-frontend.php#L195","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/sunshine-photo-cart/tags/3.7.3/includes/class-image.php#L177","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/sunshine-photo-cart/tags/3.7.3/includes/class-session.php#L164","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/sunshine-photo-cart/tags/3.7.3/includes/class-session.php#L186","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3744492%40sunshine-photo-cart&new=3744492%40sunshine-photo-cart","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b6f6b29e-1678-486c-a955-23d9247af0b5?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94169","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-94169 — Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-gr…","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.","indicators":{"cves":["CVE-2026-94169"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:14.297Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/the-grid/vulnerability/wordpress-the-grid-plugin-2-8-1-remote-code-execution-rce-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107617","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107617 — An attacker can use a hard-coded credential to log in to EseeCloud devices.","description":"An attacker can use a hard-coded credential to log in to EseeCloud devices.","indicators":{"cves":["CVE-2026-107617"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:16.510Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://eseecloud.app/","label":"ics-cert@hq.dhs.gov","domainType":"other"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-18516","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-18516 — An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, u…","description":"An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header injection","indicators":{"cves":["CVE-2026-18516"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:24.710Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://gitlab.com/crafty-controller/crafty-4/-/work_items/743","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105279","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-105279 — In the default configuration, the archive accepts DICOM associations from an unregistered calling AE…","description":"In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.","indicators":{"cves":["CVE-2026-105279"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:04.130Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95182","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-95182 — An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbit…","description":"An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.","indicators":{"cves":["CVE-2026-95182"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:36.940Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"http://deepseek.com","label":"cve@mitre.org","domainType":"other"},{"url":"https://gist.github.com/lkloliver/46a88c7d619e487327a1122c20ff8e32","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/lkloliver/poc/tree/main/CVE-2026-95182","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97851","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-97851 — The storage status-change REST service allows location records still associated with DICOM instances…","description":"The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DELETE causes PurgeStorageScheduler to delete the referenced object from storage even though the corresponding instance record rema…","indicators":{"cves":["CVE-2026-97851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:38.490Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-41582","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-41582 — countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 a…","description":"countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, public image and screenshot routes implemented in frontend/express/app.js, plugins/star-rating/frontend/app.js, and plugins/dashboards/frontend/app.js concatenate attacker-controlled wild…","indicators":{"cves":["CVE-2026-41582","CVE-2026-42269","CVE-2026-42270","CVE-2026-44977"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:17:23.623Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/Countly/countly-server/commit/405cb229ed37c744f6d61c42bf86fee5a7ee3530","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/commit/8004d29d3c789b70a79bf6e0380f0d546dbf42a9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/releases/tag/24.05.50","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/releases/tag/25.03.44","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/security/advisories/GHSA-fqgp-6rm9-8696","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/blob/master/CHANGELOG.md#version-250344","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/commit/764e2a1d86f9af600113f77422d520338c214229","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/commit/b652ee8dafa91602705004d0edb602a91a0d845e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/security/advisories/GHSA-5pmc-54j6-jcgq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/commit/72f19bc5161117fa02a224bf9f7316bf42dae58d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/commit/f9ad31480f94ee3ccc0f12708c8804be9c803f95","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/security/advisories/GHSA-86cv-qwp9-jwp3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/commit/ae899f37bc6d70c1b44859756ce80a204ae72631","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/commit/fcb16c808c0fdb6dc99fe9c66de7fc560b3a9c41","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Countly/countly-server/security/advisories/GHSA-jqp4-p86c-phxc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102692","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102692 — RIOT is an open-source microcontroller operating system designed for Internet of Things devices and…","description":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, nanocoap accepts oversized CoAP Block2 option values without enforcing the 20-bit maximum block number, allowing block offset multiplication to overflow on 32…","indicators":{"cves":["CVE-2026-102692","CVE-2026-102693","CVE-2026-49868"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:16.980Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/RIOT-OS/RIOT/commit/6b283ace3565d931b3edff7e115d4f79339253b8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/commit/ee1fa0ef91874494823d476392572aeefdbc6b74","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/releases/tag/2026.07","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-8365-gj33-rgpf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/commit/5209c1b84f9771342f079b7d5d94d8207fdd5f0a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/releases/tag/2026.04","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-gwgv-6976-hxrg","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/commit/c9830dc5f2a9bf97418de4fc7d7167d00a45df17","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/pull/22322","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-p3fx-9qcg-jmcf","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57169","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-57169 — Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endp…","description":"Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the WebSocket upgrade request. When an unauthenticated attacker has network reach to Dockhand, knows a target container ID, and target…","indicators":{"cves":["CVE-2026-57169"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:35.113Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/Finsys/dockhand/commit/efb634701c55f80a8c752df8ae08d88f2c16cce9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Finsys/dockhand/releases/tag/v1.0.34","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-f6q3-chhc-4hxm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85745","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85745 — MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1…","description":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser advances past a nested geometry header wit…","indicators":{"cves":["CVE-2026-85745","CVE-2026-85746","CVE-2026-85985","CVE-2026-86047","CVE-2026-92262","CVE-2026-97380"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:51.020Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/MariaDB/server/commit/2bf355e361db85153fdfba7b8a0f0d114d6a26ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-p7v9-24h4-mch8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://jira.mariadb.org/browse/MDEV-40328","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/MariaDB/server/commit/5c04ca5524385356ff7cf84974a7d491974c1f85","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-8fvj-c57c-pggx","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://jira.mariadb.org/browse/MDEV-40329","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/MariaDB/server/commit/4f66ca1b69daf1b7e6a562ca8e86d77a6a70abfe","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://jira.mariadb.org/browse/MDEV-40323","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/MariaDB/server/commit/2b28d1c424104429eeed43115ee6d8a803671d52","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/commit/3646569225758c8225e7342783d775ef7c7570e5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/commit/5acb43522863c9bd6b91f354104ea247bf513e9a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/commit/9d4ffe23b25808f7858b2dc48106fbd60cf0e513","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/commit/d5d741a3076f911b468518d6b06a917593498c5b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://jira.mariadb.org/browse/MDEV-39776","label":"security-advisories@github.com","domainType":"other"},{"url":"https://jira.mariadb.org/browse/MDEV-39818","label":"security-advisories@github.com","domainType":"other"},{"url":"https://jira.mariadb.org/browse/MDEV-40308","label":"security-advisories@github.com","domainType":"other"},{"url":"https://jira.mariadb.org/browse/MDEV-40311","label":"security-advisories@github.com","domainType":"other"},{"url":"https://jira.mariadb.org/browse/MDEV-40312","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/MariaDB/server/commit/574ba66b2d6c5d71db83d416677876e9b592858e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/commit/f277eefa424850a8cba5c2371406047f6395e8bb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-65jj-h265-3m7h","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://jira.mariadb.org/browse/MDEV-40362","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://jira.mariadb.org/browse/MDEV-40470","label":"security-advisories@github.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85748","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-85748 — MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, S…","description":"MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYS_REFCURSORs and then fetch o…","indicators":{"cves":["CVE-2026-85748"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:51.303Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/MariaDB/server/commit/91156c3de58762196605150ab3f756fe952592d1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/commit/9b075b2cb53338f67e7230cc585e02d2d34514ed","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-mv8g-9f7q-hprm","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://jira.mariadb.org/browse/MDEV-40396","label":"security-advisories@github.com","domainType":"other"},{"url":"https://jira.mariadb.org/browse/MDEV-40639","label":"security-advisories@github.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111626","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111626 — Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauth…","description":"Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes because controller authorization attributes are commented out. Attackers can send PUT /api/users with Admin roles to create administrator accounts, or P…","indicators":{"cves":["CVE-2026-111626"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:42.583Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/Webreaper/Damselfly/blob/4.5.3/Damselfly.Web.Server/Controllers/UserManagementController.cs#L8-L53","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Webreaper/Damselfly/blob/4.5.3/Damselfly.Web.Server/Program.cs#L238-L242","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Webreaper/Damselfly/issues/409","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/damselfly-api-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/webreaper-damselfly-through-4.5.3-missing-authentication-on-rest-api-controllers","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111641","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111641 — FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated…","description":"FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange it f…","indicators":{"cves":["CVE-2026-111641"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:44.730Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/fastapiadmin/FastapiAdmin/blob/v3.0/backend/app/api/v1/module_system/auth/controller.py#L173-L251","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/fastapiadmin-unauthenticated-autologin-and-hardcoded-jwt-secret","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fastapiadmin-through-3.0-authentication-bypass-via-auto-login-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111643","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111643 — Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauth…","description":"Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter tr…","indicators":{"cves":["CVE-2026-111643"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:45.013Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/l429609201/misaka_danmu_server/blob/v2.8.9/src/api/ui/config_history.py#L51-L66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/l429609201/misaka_danmu_server/blob/v2.8.9/src/security.py#L136-L182","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/misaka-danmu-server-ui-api-missing-authentication","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/misaka-danmu-server-through-2.8.9-authentication-bypass-via-config-history-rollback","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111673","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111673 — IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated att…","description":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any userI…","indicators":{"cves":["CVE-2026-111673"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:49.920Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/Thecosy/IceCMS","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Thecosy/IceCMS/blob/afd7a9f0d04a714e7c7e735e566c27f54b5d5201/IceCMS-ment/src/main/java/com/ttice/icewkment/configuration/ShiroConfig.java#L64-L88","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Thecosy/IceCMS/blob/afd7a9f0d04a714e7c7e735e566c27f54b5d5201/IceCMS-ment/src/main/java/com/ttice/icewkment/controller/backend/UserController.java#L743-L818","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/icecms-backend-user-admin-unauth-account-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/icecms-through-4.1.5-missing-authentication-via-user-administrative-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/icecms-backend-user-admin-unauth-account-takeover","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111687","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111687 — WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthent…","description":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ext value and a {{=expression}} template whose object-subclass tr…","indicators":{"cves":["CVE-2026-111687"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:51.920Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/rachelos/we-mp-rss/blob/v1.5.3/apis/rss.py#L185-L198","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rachelos/we-mp-rss/blob/v1.5.3/core/lax/template_parser.py#L1150-L1166","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/werss-rss-template-unauth-ssti-rce","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/werss-we-mp-rss-through-1.5.3-rce-via-template-parameter-in-rss-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/werss-rss-template-unauth-ssti-rce","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111690","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111690 — Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthen…","description":"Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign a JWT with the public secret and roleId claim 001 to gain full…","indicators":{"cves":["CVE-2026-111690"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:52.350Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/suyuan32/simple-admin-core/blob/v1.8.7/api/etc/core.yaml#L6-L8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/suyuan32/simple-admin-core/pull/382","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/simple-admin-core-hardcoded-jwt-accesssecret-admin-auth-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/simple-admin-core-through-1.8.7-hard-coded-jwt-secret-authentication-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/simple-admin-core-hardcoded-jwt-accesssecret-admin-auth-bypass","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111692","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111692 — DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unaut…","description":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to gain…","indicators":{"cves":["CVE-2026-111692"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:52.633Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/databufflabs/databuff","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/databufflabs/databuff/blob/v0.1.10/ai-apm-web/src/main/java/com/databuff/apm/web/auth/JwtTokenService.java#L36-L60","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/databufflabs/databuff/blob/v0.1.10/ai-apm-web/src/main/java/com/databuff/apm/web/config/JwtProperties.java#L8-L15","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/databufflabs/databuff/blob/v0.1.10/ai-apm-web/src/main/resources/application.yml#L54-L59","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/databuff-default-jwt-secret-auth-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/databuff-ai-apm-web-through-0.1.10-authentication-bypass-via-hardcoded-hmac-secret","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/databuff-default-jwt-secret-auth-bypass","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111693","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111693 — DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allo…","description":"DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in admin/Databuff@123 account. Attackers can POST these credentials to /webapi/api/v1/auth/login to obtain an administrator to…","indicators":{"cves":["CVE-2026-111693"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:52.773Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/databufflabs/databuff","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/databufflabs/databuff/blob/v0.1.10/ai-apm-web/src/main/java/com/databuff/apm/web/admin/account/PortalUserManagementService.java#L14-L31","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/databuff-default-jwt-secret-auth-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/databuff-ai-apm-web-through-0.1.10-hard-coded-default-admin-credentials","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111704","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111704 — LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthen…","description":"LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys, c…","indicators":{"cves":["CVE-2026-111704"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:54.370Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/LangChat/langchat/blob/2a6285a6b8c51d51cdc599771bb667a30bc03f5c/langchat-auth/src/main/java/cn/langchat/auth/controller/AigcUserController.java#L25-L60","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LangChat/langchat/blob/2a6285a6b8c51d51cdc599771bb667a30bc03f5c/langchat-auth/src/main/java/cn/langchat/auth/service/impl/AuthServiceImpl.java#L51-L58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LangChat/langchat/blob/2a6285a6b8c51d51cdc599771bb667a30bc03f5c/langchat-server/src/main/java/cn/langchat/server/config/WebAsyncConfig.java#L17-L33","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/langchat-missing-global-auth-credential-exposure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/langchat-through-commit-2a6285a-missing-authentication-on-rest-api-controllers","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111708","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111708 — WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allo…","description":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tic…","indicators":{"cves":["CVE-2026-111708"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:54.933Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/canove/whaticket-community","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/controllers/UserController.ts#L29-L48","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/services/UserServices/CreateUserService.ts#L23-L65","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/whaticket-community-signup-eop-ticket-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/whaticket-community-through-commit-cf04795-admin-self-registration-via-auth-signup","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/whaticket-community-signup-eop-ticket-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111711","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111711 — Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the…","description":"Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unbounded strcpy() calls into 64-byte stack buffers. Unauthenticated attackers can send a username longer than 63 bytes to…","indicators":{"cves":["CVE-2026-111711"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.337Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2ad7fa2aff1/2026.10.15-netcore-nr256cn-basic-auth-stack-overflow.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-pre-auth-stack-overflow-via-boa-user-ok","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102608","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-102608 — ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, d…","description":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually wraps a monitor Name value in single quotes instead of using escapeshellarg() before placing it in shell commands when a user with monitor-create or monitor-edit permission st…","indicators":{"cves":["CVE-2026-102608"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:17.253Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/ZoneMinder/zoneminder/commit/2de2ae44a1d751bad4b020c5573b2d58c59c1525","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/b3a7c05f079c87badf4b0ce052da0acfd4047a4b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/b5605e01c14354fc8e2dcae8cefd90c3674880d9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-88m4-hrgp-m9v3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://www.scriptkittens.com/blog/two-sinks-one-shell","label":"security-advisories@github.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111823","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111823 — Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknow…","description":"Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.","indicators":{"cves":["CVE-2026-111823"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T02:17:18.470Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/mage-ai/mage-ai/pull/6204","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/mage-ai/mage-ai/pull/6204/changes/76c4f467f3654041d8899b1c4447a985710d26c0","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/mage-ai/mage-ai/pull/6205","label":"cve@mitre.org","domainType":"primary"},{"url":"https://thecoregroup.net/category/the-core-group/","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104736","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-104736 — The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inc…","description":"The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitize_text_field(), which does not str…","indicators":{"cves":["CVE-2026-104736"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:47.780Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-ajax.php#L21","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-checkout.php#L377","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-checkout.php#L523","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-session-handler.php#L373","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3750024%40learnpress&new=3750024%40learnpress","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3e28e008-0ec1-4262-9ac0-6170cf8b8bdf?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111911","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111911 — phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registrat…","description":"phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account without authentication or challenge validation. Attackers can stage a victim username, submit a forged fmt=none attestation to register a passkey, then…","indicators":{"cves":["CVE-2026-111911"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:33.500Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-g6cq-6rqg-6c9p","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-rg9h-f29v-xhxr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.0.0-before-4.1.9-authentication-bypass-via-webauthn-credential-injection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-g6cq-6rqg-6c9p","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110372","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110372 — Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privile…","description":"Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.","indicators":{"cves":["CVE-2026-110372"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:36.580Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/suretriggers/vulnerability/wordpress-ottokit-plugin-1-1-40-privilege-escalation-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110885","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110885 — Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivep…","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32.","indicators":{"cves":["CVE-2026-110885","CVE-2026-110887"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:37.330Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/hivepress/vulnerability/wordpress-hivepress-plugin-1-7-32-content-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/hivepress/vulnerability/wordpress-hivepress-plugin-1-7-32-remote-code-execution-rce-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110886","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-110886 — Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot con…","description":"Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1.","indicators":{"cves":["CVE-2026-110886"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:37.450Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/conversational-forms/vulnerability/wordpress-conversational-forms-for-chatbot-plugin-1-5-1-php-object-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111998","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111998 — Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated r…","description":"Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to manage namespaces, eventbuses, users, token…","indicators":{"cves":["CVE-2026-111998"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:11.730Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/controller/tenant/controller.go#L449-L500","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/primitive/constants.go#L37","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vanus-labs/vanus/issues/647","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vanus-0.8.0-through-0.9.0-default-admin-credentials-via-gateway","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/vanus-labs/vanus/issues/647","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-98645","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98645 — In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: winwing: fix use-after-free in force feedback teardown\n\nwinwing_init_ff() passes the driver's private data, allocated with\ndevm_kzalloc() in winwing_probe(), as the effect context to\ninput_ff_create_memless(). The memoryless f…","indicators":{"cves":["CVE-2026-98645"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.757Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2b25f11ec52ea0a82334d5b83ee321f6b0a35923","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a1a5ad37e50ceb192c07ac7e2d7143638cd4d110","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98691","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98691 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Tear down inactive…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Tear down inactive DP tunnels when the domain is stopped\n\ntb_stop() only tears down DMA tunnels so a DP tunnel that is still\nwaiting for dprx_work to complete keeps that work queued while the\nrouters are removed and th…","indicators":{"cves":["CVE-2026-98691"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.523Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0b457c6733f73421a3fb03786f13d67c618b5119","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/34a6e27c954e5bfc29fead17867c7155d54b6481","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cbd2abb85ea32cafdcbaba218e13b18d8ed79bfa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98741","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98741 — In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched c…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ua101: reject mismatched capture/playback packet sizes\n\ndetect_usb_format() cross-checks bSubframeSize, bBitResolution and\ntSamFreq between the capture and playback interfaces, but never relates\nthe two endpoints' wMaxPacketS…","indicators":{"cves":["CVE-2026-98741"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.807Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/4294fe57048594a9e158b61c967bb7f943cda477","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/86f86e6fdedc33c5b8d38b9208b350f8accf57ee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eb0c7fda59cf650076f8ed5b949a6c8441aa3606","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd3a7bf0d988b0878a1957df150edb35f81db87e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98782","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98782 — In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor pl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Fix ovl adaptor platform device leak\n\nmtk_drm_probe() creates an OVL adaptor platform device with\nplatform_device_register_data() when the display pipeline requires the\nOVL adaptor.\n\nIf a later initialization step fai…","indicators":{"cves":["CVE-2026-98782"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.163Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/048739be3e9cacae5301b68245668002fe6f0ce5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3d85bd738aba61df14dfaf8fe638e2172d8427bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/629458b7e49559593823e351535294db17331be7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8e3a350075b556f2fed4517705935bfee4529fb6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98785","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98785 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: check dc_state_create_copy() for NULL in dm_suspend\n\ndc_state_create_copy() can return NULL on allocation failure.\ndm_suspend() only conditionally skips dm_gpureset_toggle_interrupts()\nand continues execution, retu…","indicators":{"cves":["CVE-2026-98785"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.467Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/015e72cde567d2450e282c2790773463156b2d0a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/197946faa1b7968046ba475ae2f266847c6f51ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/686baa1f4ec43b33e39e3d4b4a4539a91d17e883","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7283b78ca07ce491984a63f6288f3f8de5bdcb22","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98786","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98786 — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dc_sink d…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: guard dc_sink dereferences in MST mode validation\n\ndm_dp_mst_is_port_support_mode() reads\naconnector->dc_sink->dsc_caps... for the DSC branch-throughput check,\nand get_conv_frl_bw()'s HDMI-PCON FRL-bandwidth path r…","indicators":{"cves":["CVE-2026-98786"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.580Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/217f64f348c90cba62164e7ff38e0ccf78a5ca09","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/daa0437fe5e451856aaf8fda602a9fc2105bbd54","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98836","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98836 — In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized pl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: line6: reject oversized playback packets\n\nEach playback URB is handed a slice of out.buffer that is exactly\nLINE6_ISO_PACKETS * max_packet_size_out bytes, sized from the OUT\nendpoint, but the number of bytes written into that…","indicators":{"cves":["CVE-2026-98836"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.830Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/3f75da1e4ee699f6650d23d6897cf443b01856c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/61b0a5a114fa4552892da5c0ff2f42e63bf08c6b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a84371be89c39ccc46c7af8b9eb15c448df9265f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b78748424f29f07d310484b2b36afdececa74389","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98867","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98867 — In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: bound the logical key offset from persistent memory\n\ncache_key_decode() takes a key's logical off from the cache device and\nlater indexes req_key_tree->subtrees[] by it in get_subtree(). An off\npast the device forms a su…","indicators":{"cves":["CVE-2026-98867"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:41.220Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/10449703200076980704894c3d68d6796182371b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3d5a87cb909c1f375f08065b20123fa5db5958d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/97fc4b53dbe4a983fdf093243067fa6a64562307","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98868","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-98868 — In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that ov…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndm-pcache: reject a kset that overruns its segment\n\ncache_replay(), the writeback worker and the GC worker read a kset of\nget_kset_onmedia_size() bytes and advance the position by it. A forged\nkey_num makes that size exceed the seg…","indicators":{"cves":["CVE-2026-98868"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:41.320Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/01a700e9278da5706c865b9ca3ae70fdb7b4531d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7ac1f10f987a2ffae4aecf0e2ceca8f552b665cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/96e2863b1f81ea61b8d8d5d5a45d3b4c018f8e10","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108983","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-108983 — A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .","description":"A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .","indicators":{"cves":["CVE-2026-108983","CVE-2026-108984"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T02:17:05.853Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://www.geovision.com.tw/cyber_security.php","label":"0df08a0e-a200-4957-9bb0-084f562506f9","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111406","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111406 — Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG…","description":"Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.","indicators":{"cves":["CVE-2026-111406"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:46.007Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-16-1-arbitrary-file-upload-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-64943","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-64943 — Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects…","description":"Insertion of Sensitive Information into Log File vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\nFull API keys are written to application logs on every authenticated request, allowing anyone with log-read access to recover and replay active bearer credentials.…","indicators":{"cves":["CVE-2026-64943"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:48.047Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/gczojx5ypncn1x1pg9z1cphb54t23zzg","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/22","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-90910","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-90910 — Missing authentication for critical function vulnerability in Apache Answer. This issue affects Apac…","description":"Missing authentication for critical function vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\n\n\nThe reaction API did not enforce content visibility controls, allowing unauthorized users to read reaction metadata from restricted content or add and remove their own…","indicators":{"cves":["CVE-2026-90910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:49.897Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/bhw80mvmnt9206wyqz80rcbwx1znv1p3","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/34","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78162","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-78162 — Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: fr…","description":"Deserialization of Untrusted Data vulnerability in Apache Camel.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\nThe camel-hazelcast component applies a default Hazelcast JavaSerializationFilterConfig to the instances it creates from its own configuration,…","indicators":{"cves":["CVE-2026-78162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:19.037Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-43865.html","label":"security@apache.org","domainType":"other"},{"url":"https://camel.apache.org/security/CVE-2026-78162.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25566","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25595","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25599","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25600","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24413","label":"security@apache.org","domainType":"other"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24420","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112292","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112292 — CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated at…","description":"CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify and delete records because shipped PocketBase collections use empty API rules. Attackers can query /api/collections/<name>/records endpoints to steal server_token values and al…","indicators":{"cves":["CVE-2026-112292"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:07.903Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/operacle/checkcle/blob/v1.6.0/application/public/upload/data/pb_schema_latest.json","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/operacle/checkcle/commit/f2c338ced9162b7820b2495e298d5578df92bf75","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/operacle/checkcle/issues/214","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/checkcle-through-1.6.0-missing-authorization-via-empty-pocketbase-api-rules","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112296","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112296 — FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthentica…","description":"FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain full…","indicators":{"cves":["CVE-2026-112296"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:08.510Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/sunkaifei/FlyCms/blob/edfdf724c3b944310f60c29aa755d03a00a75837/README.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sunkaifei/FlyCms/blob/edfdf724c3b944310f60c29aa755d03a00a75837/sql/flycms_20260928_093335.sql","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sunkaifei/FlyCms/issues/19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/flycms-through-commit-edfdf724-default-super-administrator-credentials","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109432","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109432 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerabili…","description":"Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allowing authenticated users to bypass the enableExpressionsInAdhoc…","indicators":{"cves":["CVE-2026-109432"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:02.487Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codeant.ai/security-research/camunda-adhoc-query-expression-rce-cve-2026-109432","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docs.camunda.org/enterprise/download/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/camunda-expression-injection-via-orqueries-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111057","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111057 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From…","description":"Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to /api/terminals therefore bypass the anonymous endpoint blockli…","indicators":{"cves":["CVE-2026-111057","CVE-2026-111059"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.810Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mljar/mercury/commit/8c467129037ee9df269d543ac217ffd33b97bf3f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/v3.2.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-f8c7-rwf9-fmgm","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/commit/c798a85924e6614c6fea7afe5a560e4554a1d09b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/v3.2.11","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-2658-85cv-9wwq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111058","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111058 — Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prio…","description":"Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing arbitrary Python. The endpoint blocklist does not cover /api/ke…","indicators":{"cves":["CVE-2026-111058"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.957Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mljar/mercury/commit/73a40ceb0becf057f495a5738ad7f5a5222a53e1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/releases/tag/3.2.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mljar/mercury/security/advisories/GHSA-rv4m-xm3f-3ccq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107083","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107083 — SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injectio…","description":"SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.","indicators":{"cves":["CVE-2026-107083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.690Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107083","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/393","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Primandito/CVE-2026-107083","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/393","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107188","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-107188 — A user can upload export reports with any file contents and specify any contents. JSP code can be up…","description":"A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerab…","indicators":{"cves":["CVE-2026-107188"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:01.080Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111862","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-111862 — Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.…","description":"Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. Rank Math states that the affected plugin files contained malware that could compromise a we…","indicators":{"cves":["CVE-2026-111862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:04.507Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://rankmath.com/changelog/","label":"security@wordfence.com","domainType":"other"},{"url":"https://rankmath.com/kb/pro-3-0-123-security-incident/","label":"security@wordfence.com","domainType":"other"},{"url":"https://rdap.verisign.com/com/v1/domain/rank1cdn.com","label":"security@wordfence.com","domainType":"other"},{"url":"https://urlscan.io/result/01a145c2-8dc8-72ff-a65d-21209ca29c4f/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/81cd7a2c-ad0c-4dbc-b5dc-07ec866d5c1f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109437","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109437 — Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defau…","description":"Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via POST /sessions and post a message via POST /sessions/{id}/mess…","indicators":{"cves":["CVE-2026-109437"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:19.807Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/CognicellAI/Cognition/releases/tag/v0.13.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109437","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cognition-unauthenticated-rce-via-local-shell-backend","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112776","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112776 — Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-s…","description":"Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to mutate other sites' content because requireAllowedSite() is not enforced. Attackers holding a site-A token can create entries in site B via supplied siteId and delete entries,…","indicators":{"cves":["CVE-2026-112776"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.900Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-7rr3-4jcm-x526","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-graphql-site-scope-bypass-via-mutations","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112779","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112779 — Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for ever…","description":"Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and 1.0.16 before 1.0.42 fails to check target and destination page rules in the sync and batch copy e…","indicators":{"cves":["CVE-2026-112779"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.323Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-8pcm-97fc-4xwh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-api-plugin-before-1.0.42-cache-exhaustion-and-page-permission-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112370","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112370 — A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of t…","description":"A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was c…","indicators":{"cves":["CVE-2026-112370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.817Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_cmdi_root_rce/poc","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112370","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983537","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422416","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422416/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112371","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-112371 — A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the…","description":"A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclosed a…","indicators":{"cves":["CVE-2026-112371"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.000Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/file_write_root_rce","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112371","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983538","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422417","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422417/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109395","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109395 — Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc…","description":"Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs. Attackers can supply crafted LZF streams to applications using the default LZFDecoder to leak unrelated JVM he…","indicators":{"cves":["CVE-2026-109395"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:09.957Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/github/securitylab/discussions/970","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress/blob/compress-lzf-1.1.3/src/main/java/com/ning/compress/lzf/impl/UnsafeChunkDecoder.java#L104","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress/commit/06bdc3744a96b736a7118891f403e44c664f108b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ning/compress/pull/68","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ning-compress-lzf-before-1.2.0-out-of-bounds-memory-access-via-unsafechunkdecoder","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109442","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-109442 — piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat age…","description":"piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attackers can instruct the agent to call the exec_shell tool, which runs arbitrary commands via subprocess.run without human a…","indicators":{"cves":["CVE-2026-109442"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.383Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/agents/tools.py#L114","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/cas-bigdatalab/piflow/blob/ad8d0108a54a4257307d4946dc9250e26f24c63f/server.py#L615","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109442","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/piflow-2.0.0-through-2.0.1-unauthenticated-rce-via-chat-agent-exec-shell","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75128","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-75128 — Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any register…","description":"Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the serv…","indicators":{"cves":["CVE-2026-75128"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.063Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/chatchat-space/Langchain-Chatchat/blob/a6a9193b5002061719f0eee62c6310bd5b1b7f63/libs/chatchat-server/chatchat/server/api_server/tool_routes.py#L33","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-75128","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/langchain-chatchat-through-0.3.1.3-unauthenticated-rce-via-tools-call-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77932","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77932 — DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /ap…","description":"DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's unsandbox…","indicators":{"cves":["CVE-2026-77932"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.503Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/tools/code_interpreter.py#L39","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/packages/dbgpt-serve/src/dbgpt_serve/utils/auth.py#L25","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77932","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/db-gpt-through-0.8.2-unauthenticated-rce-via-api-v1-chat-react-agent","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77933","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77933 — DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.ym…","description":"DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfaces. Attackers reaching port 3306 or the shared dbgptnet network can authenticate as root@% to gain full database access…","indicators":{"cves":["CVE-2026-77933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.670Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/eosphoros-ai/DB-GPT/blob/83609c471266607490b24e72188311efa23a0d16/docker-compose.yml#L9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77933","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/db-gpt-through-0.8.2-hardcoded-mysql-root-credentials-in-docker-compose-deployment","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77936","source":"nvd","category":"vulnerability","severity":"critical","title":"CVE-2026-77936 — Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password…","description":"Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST /v1/tools/…","indicators":{"cves":["CVE-2026-77936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.107Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/compose.yaml#L17","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/server/rest_api/app.py#L799","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77936","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/letta-through-0.16.8-insecure-default-configuration-unauthenticated-api-and-postgresql-access","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"vendor-cve-2026-70197-net-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70197 .NET Remote Code Execution Vulnerability","description":"Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed.  We are working to prepare and test a complete mitigation.  We will update this document when there is more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96237","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70174","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96224","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96235","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-103572-visual-studio-tools-for-applications-and-sql-server-management-s","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability","description":"Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83831-microsoft-edge-chromium-based-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","description":"Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83831","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85890","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85897","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85898","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96199","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85806-network-policy-server-nps-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85806","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85371","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85799","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85811","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70207","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100222","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70213-microsoft-power-apps-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70213 Microsoft Power Apps Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70213","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70013-windows-iscsi-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70013 Windows iSCSI Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70013","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70095","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69521","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69705","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69634","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69883","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70038","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97776-microsoft-office-excel-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-97776 Microsoft Office Excel Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97776","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97777","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108446","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88145","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97750","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97753","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97017","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97766","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97003","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97751","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97752","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97758","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97754","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97761","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97747","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97780","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97767","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97770","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97771","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97755","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97765","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97739","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97778","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97759","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77902","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70254","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97748","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97007","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97756","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97008","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97769","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97773","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97010","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97762","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97011","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97757","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97738","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97742","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97746","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97004","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97741","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97763","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97775","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97772","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97768","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97745","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100211","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100209","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100210","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100212","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97009","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96202-windows-raw-image-extension-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96202 Windows Raw Image Extension Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96202","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96943","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-78524-microsoft-office-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78524","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108444","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88197","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88196","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-81396-microsoft-excel-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-81396 Microsoft Excel Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81396","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68798","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105718","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102858-microsoft-office-onenote-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102858","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97781","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105599-microsoft-office-powerpoint-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105599","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88178","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70215","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88144","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88207","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105715-microsoft-office-word-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-105715 Microsoft Office Word Remote Code Execution Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105715","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108426","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108427","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108428","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108429","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108430","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108431","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108432","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108437","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108439","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108440","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108441","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108442","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108443","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108445","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108447","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108449","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108450","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108451","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70268","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70220","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70269","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70287","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70302","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70301","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83891","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88150","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88202","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97001","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88185","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88186","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70300","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96996","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108448-microsoft-office-outlook-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-108448 Microsoft Office Outlook Remote Code Execution Vulnerability","description":"Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any furth…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108448","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70291","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70256","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70257","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70282","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97012","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97016","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97749","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70242","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108452-microsoft-office-sharepoint-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-108452 Microsoft Office SharePoint Remote Code Execution Vulnerability","description":"Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any furth…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108452","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69943","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70267","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85900","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88155","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88163","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88166","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105013","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70096-windows-rich-text-edit-control-remote-code-execution-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70096","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70007-net-framework-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability","description":"Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-32157-remote-desktop-client-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability","description":"Updated product information in the Software Update table. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32157","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108458","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69976","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83688","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97789","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69984","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69986","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69988","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69987","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69995","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69997","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69996","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69991","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69994","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69998","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70012","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70004","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70006","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103575","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69676-windows-kerberos-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69676","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69351-windows-universal-plug-and-play-upnp-device-host-information-disc","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69351","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69620-windows-dhcp-server-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69620","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70058","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69830","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85841","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70069","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88171","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88117","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88119","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88120","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96320","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96934","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69334-windows-volume-manager-extension-driver-remote-code-execution-vul","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69334","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85928","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-81352-web-media-extensions-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-81352 Web Media Extensions Remote Code Execution Vulnerability","description":"Updated product information in the Software Update table. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102849-microsoft-office-access-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-102849 Microsoft Office Access Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102849","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102850","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105591","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105592","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105593","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105595","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105596","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105597","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105598","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105714","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105716","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105717","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108400-hevc-video-extensions-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-108400 HEVC Video Extensions Remote Code Execution Vulnerability","description":"Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108400","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108457-microsoft-windows-pdf-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability","description":"Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108457","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102227-windows-resilient-file-system-refs-remote-code-execution-vulnera","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-102227 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102227","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102235-visual-studio-code-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-102235 Visual Studio Code Remote Code Execution Vulnerability","description":"Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102235","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102238","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70098","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69370","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102855-microsoft-office-visio-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-102855 Microsoft Office Visio Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102855","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102856","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102857","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108467-microsoft-postscript-printer-driver-remote-code-execution-vulner","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108467","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70147","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70153","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105733-windows-hyper-v-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability","description":"Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105733","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83716","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83931","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102214","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108460-windows-message-queuing-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-108460 Windows Message Queuing Remote Code Execution Vulnerability","description":"Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108460","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69639-windows-libarchive-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69639","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70062","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69985","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69913-windows-tcp-ip-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69913 Windows TCP/IP Remote Code Execution Vulnerability","description":"Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69913","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69942-windows-overlay-filter-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69942 Windows Overlay Filter Remote Code Execution Vulnerability","description":"Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69942","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69947","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69958","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69959","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70014-windows-cryptographic-services-remote-code-execution-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70014 Windows Cryptographic Services Remote Code Execution Vulnerability","description":"Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70014","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70127-windows-domain-name-service-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70127 Windows  Domain Name Service Remote Code Execution Vulnerability","description":"Use after free in DNS Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70127","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83642","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83869","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70167","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85903","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88112","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88114","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88116","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96113","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70126-windows-bluetooth-port-driver-remote-code-execution","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70126 Windows Bluetooth Port Driver Remote Code Execution","description":"Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70126","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87713","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70119-windows-dns-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70119 Windows DNS Remote Code Execution Vulnerability","description":"Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70119","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70247-http-sys-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70247 HTTP.sys Remote Code Execution Vulnerability","description":"Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70247","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-67625-microsoft-sql-server-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-67625 Microsoft SQL Server Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67625","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70189","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83945","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85886","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65674","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88083","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88089","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83578-microsoft-powershell-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability","description":"Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83578","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85817","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70052","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83693-windows-error-reporting-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83693","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83748","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83758","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83916","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83519","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83643","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97815","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83700-windows-now-playing-session-manager-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83700 Windows Now Playing Session Manager Elevation of Privilege Vulnerability","description":"Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83700","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83701","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83712-windows-ntfs-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83712 Windows NTFS Remote Code Execution Vulnerability","description":"Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83712","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96867","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83640","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69902","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83754-microsoft-openssh-for-windows-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83754 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83754","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88157","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83923","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97816","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83759-windows-encrypting-file-system-efs-remote-code-execution-vulnerab","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83759 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability","description":"Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83759","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83780-windows-ccffilter-driver-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability","description":"Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83780","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83782-windows-shell-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83782","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85936","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83836-windows-event-tracing-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83836 Windows Event Tracing Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83836","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83874","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83844-windows-paint-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83844 Windows Paint Remote Code Execution Vulnerability","description":"Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83862-windows-network-load-balancing-remote-code-execution-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability","description":"Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83862","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70089-windows-gdi-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70089 Windows GDI Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70089","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83929","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83934","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70275-windows-cd-rom-file-system-driver-remote-code-execution-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70275 Windows CD-ROM File System Driver Remote Code Execution Vulnerability","description":"Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70275","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83914-microsoft-xml-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83914 Microsoft XML Remote Code Execution Vulnerability","description":"Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83914","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83935","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83919-microsoft-internet-messaging-api-remote-code-execution-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83919 Microsoft Internet Messaging API Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83919","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83778","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83928-windows-local-security-authority-subsystem-service-lsass-remote-c","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83928 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability","description":"Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83928","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96219","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69886-windows-imaging-component-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69886","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77496","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84012-windows-remote-desktop-services-remote-code-execution-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-84012 Windows Remote Desktop Services Remote Code Execution Vulnerability","description":"Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84012","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70187","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84015-remote-access-point-to-point-protocol-ppp-eap-tls-remote-code-exe","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84015","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85339-windows-routing-and-remote-access-service-rras-remote-code-execut","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85339 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","description":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85339","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85792","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85809","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70158","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85373-windows-universal-plug-and-play-upnp-device-host-elevation-of-pri","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85373 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85373","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85375","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85918","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85927","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85798-windows-distributed-file-system-dfs-remote-code-execution-vulnera","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85798 Windows Distributed File System (DFS) Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85798","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85931","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85814-microsoft-windows-media-foundation-remote-code-execution-vulnerab","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85814","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70258","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83517","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96952","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85856-internet-connection-sharing-ics-remote-code-execution-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85856 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ics","rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85856","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88159-windows-background-intelligent-transfer-service-bits-remote-code-","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-88159 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability","description":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88159","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88173","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88121","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88142","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88165-windows-active-directory-domain-services-remote-code-execution-vu","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-88165 Windows Active Directory Domain Services Remote Code Execution Vulnerability","description":"Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88165","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70229","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85926-windows-secure-socket-tunneling-protocol-sstp-remote-code-executi","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85926 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","description":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85926","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88102-microsoft-failover-cluster-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability","description":"Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88102","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88136-web-distributed-authoring-and-versioning-webdav-remote-code-execu","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-88136 Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability","description":"Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88136","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70024-windows-internet-information-services-remote-code-execution-vulne","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70024 Windows Internet Information Services Remote Code Execution Vulnerability","description":"Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70024","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96864-microsoft-failover-cluster-virtual-driver-remote-code-execution-v","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96864 Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability","description":"Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96864","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96096-windows-media-player-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96096 Windows Media Player Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96096","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69992-remote-desktop-services-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69992 Remote Desktop Services Remote Code Execution Vulnerability","description":"Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69992","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70157-windows-system-information-console-remote-code-execution-vulnerab","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70157 Windows System Information Console Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70157","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69765-windows-storport-miniport-driver-remote-code-execution-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69765 Windows Storport Miniport Driver Remote Code Execution Vulnerability","description":"Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69765","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69326-graphic-fonts-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69326 Graphic Fonts Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69326","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83523-windows-image-acquisition-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83523 Windows Image Acquisition Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83523","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83725-microsoft-windows-search-component-remote-code-execution-vulnerab","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83725 Microsoft Windows Search Component Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83725","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83739-windows-bluetooth-service-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83739 Windows Bluetooth Service Remote Code Execution Vulnerability","description":"Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83739","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83770-windows-text-shaping-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83770 Windows Text Shaping Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83770","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102210","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102225","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97814","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83797-windows-partition-management-driver-remote-code-execution-vulnera","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83797 Windows Partition Management Driver Remote Code Execution Vulnerability","description":"Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83797","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97805","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83856-windows-event-logging-service-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83856 Windows Event Logging Service Remote Code Execution Vulnerability","description":"Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83856","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83889-windows-dns-server-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83889 Windows DNS Server Remote Code Execution Vulnerability","description":"Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83889","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83910-rpc-runtime-library-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-83910 RPC Runtime Library Remote Code Execution Vulnerability","description":"Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83910","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88219","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85874-windows-message-queuing-queue-manager-remote-code-execution-vulne","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-85874 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability","description":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85874","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100202","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69789-windows-reliable-multicast-transport-driver-rmcast-remote-code-ex","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69789","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88115-windows-server-for-nfs-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-88115 Windows Server for NFS Remote Code Execution Vulnerability","description":"Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88115","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88174-windows-deployment-services-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-88174 Windows Deployment Services Remote Code Execution Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88174","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70112-windows-spaceport-sys-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70112 Windows Spaceport.sys Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70112","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70143-windows-network-file-system-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70143 Windows Network File System Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70143","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70250-windows-dhcp-client-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70250 Windows DHCP Client Remote Code Execution Vulnerability","description":"Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70250","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70297-skype-for-business-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70297 Skype for Business Remote Code Execution Vulnerability","description":"Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70297","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70571-microsoft-exchange-server-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70571 Microsoft Exchange Server Remote Code Execution Vulnerability","description":"Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70571","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69802-network-device-enrollment-service-ndes-remote-code-execution-vuln","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-69802 Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability","description":"Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69802","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-94512-sql-server-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-94512 SQL Server Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94512","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70343-microsoft-mpeg-2-video-extension-remote-code-execution-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-70343 Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96230-asp-net-core-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96230 ASP.NET Core Remote Code Execution Vulnerability","description":"Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96230","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96321-remote-desktop-display-driver-information-disclosure-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96321 Remote Desktop Display Driver Information Disclosure Vulnerability","description":"Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96321","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96909-windows-bitlocker-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96909 Windows BitLocker Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96909","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96924-windows-ole-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96924 Windows OLE Remote Code Execution Vulnerability","description":"Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96924","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-21413-raw-image-extension-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-21413 Raw Image Extension Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96953-windows-universal-disk-format-file-system-driver-udfs-remote-code","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96953 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability","description":"Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96953","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96071-windows-media-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-96071 Windows Media Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96071","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-100207-azure-cyclecloud-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-100207 Azure CycleCloud Remote Code Execution Vulnerability","description":"Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100207","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-100214-microsoft-dynamics-365-business-central-remote-code-execution-vu","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-100214 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability","description":"Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100214","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-100218-remote-desktop-gateway-service-remote-code-execution-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-100218 Remote Desktop Gateway Service Remote Code Execution Vulnerability","description":"Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100218","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-100219-microsoft-quic-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability","description":"Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100219","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-100220-windows-media-video-decoder-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-100220 Windows Media Video Decoder Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100220","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102203-rpc-runtime-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-102203 RPC Runtime Remote Code Execution Vulnerability","description":"Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102203","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-100215-microsoft-graphics-component-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-100215 Microsoft Graphics Component Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100215","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105005-windows-schannel-remote-code-execution-vulnerability","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-105005 Windows Schannel Remote Code Execution Vulnerability","description":"Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105005","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0322-pan-os-authenticated-remote-code-execution-rce-in-the-management-i","source":"vendor-blogs","category":"advisory","severity":"critical","title":"CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:30:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0322","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-151.243.11.150","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 151.243.11.150","description":"Country: DE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["151.243.11.150"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/151.243.11.150","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-135.119.91.34","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 135.119.91.34","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["135.119.91.34"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/135.119.91.34","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-57.131.50.86","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 57.131.50.86","description":"Country: IT | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["57.131.50.86"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/57.131.50.86","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-109.160.32.123","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 109.160.32.123","description":"Country: DE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["109.160.32.123"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/109.160.32.123","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-185.223.235.46","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 185.223.235.46","description":"Country: NL | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["185.223.235.46"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/185.223.235.46","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-13.140.80.140","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 13.140.80.140","description":"Country: FI | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["13.140.80.140"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/13.140.80.140","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-14.51.12.142","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 14.51.12.142","description":"Country: KR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["14.51.12.142"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/14.51.12.142","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-43.135.144.81","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 43.135.144.81","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["43.135.144.81"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/43.135.144.81","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-106.13.95.198","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 106.13.95.198","description":"Country: CN | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["106.13.95.198"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/106.13.95.198","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-103.216.145.2","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 103.216.145.2","description":"Country: IN | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["103.216.145.2"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:01.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/103.216.145.2","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-45.115.26.61","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 45.115.26.61","description":"Country: DE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["45.115.26.61"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/45.115.26.61","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-115.178.75.242","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 115.178.75.242","description":"Country: KR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["115.178.75.242"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/115.178.75.242","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-43.172.117.23","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 43.172.117.23","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["43.172.117.23"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/43.172.117.23","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-172.209.208.96","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 172.209.208.96","description":"Country: ZA | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["172.209.208.96"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/172.209.208.96","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-210.91.153.182","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 210.91.153.182","description":"Country: KR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["210.91.153.182"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/210.91.153.182","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-186.122.177.140","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 186.122.177.140","description":"Country: AR | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["186.122.177.140"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/186.122.177.140","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-172.212.203.117","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 172.212.203.117","description":"Country: US | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["172.212.203.117"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/172.212.203.117","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-122.170.99.195","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 122.170.99.195","description":"Country: IN | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["122.170.99.195"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/122.170.99.195","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-2.57.217.229","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 2.57.217.229","description":"Country: GE | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["2.57.217.229"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/2.57.217.229","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"abuseip-77.239.124.77","source":"abuse-ipdb","category":"ip-reputation","severity":"critical","title":"Malicious IP: 77.239.124.77","description":"Country: NL | ISP: unknown | Abuse score: 100%","indicators":{"cves":[],"ips":["77.239.124.77"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":100,"publishedAt":"2026-10-20T02:17:00.000Z","fetchedAt":"2026-10-20T03:00:00.197Z","references":[{"url":"https://www.abuseipdb.com/check/77.239.124.77","label":"AbuseIPDB","domainType":"primary"}],"feedLabel":null},{"id":"threatfox-1974957","source":"threatfox","category":"threat-intel","severity":"critical","title":"botnet_cc: undefined","description":"https://bazaar.abuse.ch/sample/58648467edabd8e8914b022a8d475bffc6db598086f4505e09815e9d02537f91/","indicators":{"cves":[],"ips":[""],"domains":[],"urls":[""],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["Vidar","AISURU","c2","Vshell","c7a50169dbc6d842a7e7d349513f88f1","Loader","stealer","ec141392be2e474ab700bf353b3b9f2c","njrat","remcos","REMOTEHOST","ac32fe0cdedaab512d4ba45a7cfcc26b","honeypot","f7e0bdc53604a00d861131d2693a943c","sliver c2","QuasarRAT","drb-ra","Mythic","Havoc","sliver","PureHVNC","PureRAT","RAT","CobaltStrike","JUNIO777","SERVER2405v2","GP","332ps1Ago","Star-Baby-27","RatonRAT","RemcosRAT","ValleyRAT","valleyrat_s2","trum","1718e0679220166cf123fbe6e40c635c","d85b02740b9fbbe0bc098debbc5a5109","moobot","Supershell","shodan","abe-bypass","ClickFix","com-hijacking","DesktopStreamClient","hermes","hermes-stealer","Hvnc","infostealer","loader-c2","Lold","MaaS","SyncService","exfil","FakeGit","LuaJIT","SmartLoader","Mirai","Remus","373d420e3c3e68da3a553422caafc283","1ca8afc0e9497e2ea687b455ff40cf1e","Adaptix","AdaptixC2","asyncrat","DinDoor","EvilGinx","EvilGoPhish","TRT UR BEST","XWorm","censys","exe","RevStealer","Android","GhostBat","mParivahan","veltrix","CantoIncognito","cryptomining","PoeLLM","Sektor7","elf","apix","fake-git","powershell","IRC","k4_irc_bot","onlycn","ROOTKIT","minefox","shellcode","stage2","fake-crack","Github","stager","IoT","Mozi","Romulus","ViriBack","6713982832fdd0efe07912b12c5c5b2b","c1399bfb1be0a51415613edd6f0068c5","5a4378fb90db39f09c7b18d1f314e645","945c9f3c8cddcb7f33efce50a9a949ad","modat","murdoc","Covenant","Antidot","dcrat","b9df72d092aeb25d8cb28d34cc4984de","guloader","NSIS","XtremeRAT","NanoCore","Arechclient2","SectopRAT","default-cert","mtls","tofsee","Port$$","codec-cache","cve-2026-96656","miner","plex","Huatai007","CHAOS","Viper","cs-watermark-666666666","cs-watermark-987654321","Gafgyt","CheatSheet","dead-drop","gitlab","pastebin","DPRK","etherhiding","polinrider","backdoor","bot","Sh","dump-yuv","PM-5766","ErrTraffic","Polygon","521048dd5a8917782e586ac60bc1eceb","WinWordl","botnet","CECbot","DDoS","host","go","legea","369b7d35486e31c3854c6efc823ab439","sliverc2","d42249d8b3409d0cd65c3cc7f8267ec0","dotNET","fake-cheat","Qt5Widgets","sideloading","TeamSpeak","NUEVAS4001","airashi","Jackskid","rctea","MicroUpdate","apk","GoPhish","BruteRatel","adf0aff417ab94ddd17c189420efb165","ab0a59f4970a96fd6e8daa4f6f8e22cd","b89d843f29af2eed09805e9767a1165f","379e62cc9396a8acb287a1e7d775797d","tor30fly","runelure","EyePyramid","f8358565e3d80fb9c69fcbe9d3349f1d","dongfeng","drifter","cryptominer","huggingface","MinerWars","GRIDTIDE","Stealc","potassium","woof","5c07e21ca557de9ff0ce91d009c62e00","5ecaf10790d5f89db8606b207b2143e4","625f32b674143ce7827477f4a5675dfe","Meterpreter","d852ede598d72f2b3a4050576466ec62","hook","DanBot","SAVED START","DIVINE","BL-Networks","cab","nginx","payload-delivery","pycached","operator-server","Aptos","blockchain-C2","ContagiousInterview","macOS","MacSync","Protrollzx","WIN","newfish","CK-099","c8ae9fc91602b6596ce53dffcd0c5146","19ccb70dbc12ef919d5869277e598933","tag","cs-watermark-391144938","inject-2","20473","Cobalt Strike","25820","210558","Oct-1-2026","RemcosAgent","Vjw0rm","WSHRAT","dc2e5904be10c1f064ddfc0f4cca6898","Nexus 31-08-2026","CLOUDHAZE","live-fire-detonation","UNC7072","newember","SUPERMARIO","quasar","Oct_Milli","e5c73f2f0e4a2909e7e914ac4e867b57","d813994ce1dbd4db71c3b48d6cf58bfc","shadowpad","2debf41cd243fa04fa0d0ba1afd03826","real","ONETOUCH","0f81469cc7638ba7c82eaddbd6b3c20a","staging","Oct-5-2026 exploit","Oct-14-2026 Frost","EMBER 64","WARDENStealer","injectus","Remcos32b","4040","RUST","URL","tauri","DarkSword","panel","Coruna","ios","MythicC2","Poseidon","KoiLoader","KoiStealer","BridgeAgent","hidden-desktop","dropped-by-amadey","Electron-ASAR","ExFiles","flomo-abuse","cowrie","dns-xor","OpenNIC","212317","202412","botnet_cc","config-server","Wicked Kryptex Test","cveil","NetSupport","poshc2","nuevos 07","SalatStealer","TON","webrat","fake-steam-client","phishing","Steam","Pass2","317106","Amadey","smokeloader","Cloudzy","fake-ai-tool","Melty","Bst","4bc2877d1ad24788eb5675dd034f5bad","f1f28418d97a5af5ae1f0ae2e29d2056","4039","BDmonies","Rem1","GomoRAT","Gh0stRAT","blizzard-net","8560","NMUOnAPUAPU"],"malwareFamily":"Vidar","confidence":100,"publishedAt":"2026-10-20T02:55:48Z","fetchedAt":"2026-10-20T03:00:02.155Z","references":[{"url":"https://bazaar.abuse.ch/sample/58648467edabd8e8914b022a8d475bffc6db598086f4505e09815e9d02537f91/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1fa5a629fdc3033dc47b7de27924aaf02e37781bb8b0d281088100dd52ab6a8f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/71d9c3ee5a1deab2f908c269b72242ea0820b69b871ad9ffe7d35f1091fdabd1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/dc92065072ed7815c08f402351c3619c71345005aed0781abb9981559a6291c8/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/Genusraphiahell447/gnoma","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/8f9b2ee97e673d73876abbc952ac533f881749baba69d07a493c3f66d802fae0/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/abe9fae9fc08460dad9e3101b5db9e1c873c1e14dd5c8f716dd19ef523b78b37/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3d3362f1bd817c6c92aea1a2f3245ffa792c039803c0694319a8adcca57fbf0c/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/ac62a1dfc283429341b99196d974da0a18ffe4f4e30ac28eb4e9583aed4b592f/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/90e5428595b72d0feba72204b5414349c553dea0e59fce5a1ef2580cfbbc03c4/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.lumen.com/blog/en-us/canto-incognito-tracking-the-poellm-malware","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4cae4c533e96cfa71e62966c8fa6339e1188629d2f0cfe86e040e733e10450e1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/68805da92456eb377426f890b7f95fcd7d5552f148fe033827d67566027f4cd7/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/153.117.40.26","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/103.26.82.84","label":"ThreatFox","domainType":"other"},{"url":"https://tracker.viriback.com/index.php?q=23.94.252.153","label":"ThreatFox","domainType":"other"},{"url":"https://tracker.viriback.com/index.php?q=93.152.213.151","label":"ThreatFox","domainType":"other"},{"url":"https://tracker.viriback.com/index.php?q=91.92.43.242","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/57a23842ad1e35d74a7668ab2112de54d92b2a70f6949d7f892002aeb5d69db6/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4421ccd153aa864e3eb4ac89044c92eba48a1ecca7efc759203368004a7ded05/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/8bf1aefe99486ba24e1bce15035046809d9af0d8d98e0b58c23c38456749b09e/","label":"ThreatFox","domainType":"primary"},{"url":"https://magnify.modat.io/hosts/223.206.137.140","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/91.208.206.98","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/50.6.7.9","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/89.44.80.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/89.169.47.107","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/89.124.109.73","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/85.234.100.6","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/87.97.106.161","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/87.97.106.16","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/82.131.202.123","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/77.42.88.18","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/68.64.178.130","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/65.87.7.171","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/5.253.17.131","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/47.85.195.225","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/82.131.154.234","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/79.7.84.77","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/47.111.93.184","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.9.150.244","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.61.164.176","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.192.98.195","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.133.73.47","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/38.54.117.91","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.13.237.148","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.12.114.252","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/38.134.189.93","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/31.56.228.136","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/36.90.146.86","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/36.85.85.9","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/27.77.190.214","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/23.94.252.26","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/217.60.38.147","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/216.152.147.94","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/27.74.232.241","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/190.34.248.222","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/190.32.14.227","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/2.56.245.38","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/199.188.201.197","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/203.117.231.234","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/2.182.230.122","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/196.65.222.84","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/181.178.81.36","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/181.178.169.163","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/205.209.110.158","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/185.165.171.21","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/182.126.209.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/182.126.208.234","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/189.243.254.53","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/189.158.8.140","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/189.153.155.63","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/180.183.166.8","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/180.183.141.125","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/155.103.71.194","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/155.103.71.190","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/155.103.71.171","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/104.243.248.63","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/178.208.94.116","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/178.208.92.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/176.65.144.91","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/175.139.167.153","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/175.139.167.128","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/169.58.32.48","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/169.58.190.186","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/172.111.139.184","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.5.38.70","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.4.14.109","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/167.160.186.200","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/162.35.101.111","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/159.75.81.58","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/156.238.123.83","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/161.49.132.132","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/161.142.171.191","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/151.243.225.118","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/150.40.117.172","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/144.202.31.39","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/143.246.202.52","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.94.41.76","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.94.1.66","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.94.66.86","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.42.216","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.42.188","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.35.210","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.4.35.150","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.54.51","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.50.93","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.254.208","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/125.167.173.215","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/117.72.8.112","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.167.35","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.162.164","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.141.186","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/123.11.120.163","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/118.200.217.121","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/118.170.209.247","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/115.76.96.61","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.83.86.48","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/113.44.94.49","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/115.76.105.249","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.250.7.232","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.229.150","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.221.15","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.215.221","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.199.9","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.194.101","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/109.199.122.80","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/107.173.244.57","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/107.173.226.190","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.83.86.40","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.83.86.126","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.223.131.214","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/1.162.228.144","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/1.162.212.127","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/107.172.3.44","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/104.168.115.69","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/102.220.160.198","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/1.162.245.87","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/90.148.39.109","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/47.252.13.1","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/140.99.98.91","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/188.25.15.70","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/188.137.225.124","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/80.200.202.102","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/45.227.254.114","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/212.118.39.90","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/77.238.252.235","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/5.8.248.204","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/145.63.140.171","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/140.143.193.143","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/80.78.28.56","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/7a0b56bc2253ce40d2b04d48916ed239e5b9fc322d2a4628a681ac2b7f5b2cb0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e070ad0f5753a8b14c3990afa27130dfc16c55c2aeebf60f8807989e500f5034/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d8f9200e8be8904e4da4e48c03b63d4c2d7aab624717c47f0892e61c09545be7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1fac02a405615d392e3ca0b0e706f3f27c5b64dcc1e690d175c37fe0f71742b3/","label":"ThreatFox","domainType":"primary"},{"url":"https://winslow1984.com/books/threat-intelligence/page/hey-you-hacked-a-hacker-are-you-ready-for-my-revenge","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/62c33fcb17ffc7396de62e00094d472463ef084c7141ba285db33310176a2fcb","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lovingthejourneys.com","label":"ThreatFox","domainType":"other"},{"url":"https://github.com/deepfield/public-research/tree/main/cecbot","label":"ThreatFox","domainType":"primary"},{"url":"https://blog.efespain.com/en/chapter-32/","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/190.32.99.7","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/179.61.223.178","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/50.114.167.183","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/193.200.229.35","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.195.160","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.4.187.134","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/orlof_v/status/2111396440815947970?s=20","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/823efb0d0247dd4d178f07e6ac7a564697ddac95036f311ef1beabd5f4cfd71e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e06be431a8d427579fec15f84bb152326953a7be7a4d20060c6317614ca27843/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/30fc0956603edd1949fc222b3278fbd5bc9de3cd799cba9379605537e8e4788c/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/aisuru","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/jackskid","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d76706ec1ef248c678aeb8bf6484e2f8f6822d0d537dbce2be1de23045e65ae6/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2935b3d7fe05f60261e5a0d57f78f2b12961126ba4caee260f720d2f15f35d8f/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/114.55.26.57#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/4.207.192.164#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/47.97.206.32#50050","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/106.55.253.229#50050","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/106.12.61.28#50050","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/169.58.53.135#8081","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/41.232.4.27#1177","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/54.199.35.147#80","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/20.111.19.203#4321","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/47.237.253.174#10443","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/843cdaf3fd24c4c227f37b0ac5dc69ee66e06b3e346cb45b99c11baf81c36a10/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/drifter","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/41662daeb91040d14e6c727b7444652cc5f6473a1645b6e63f8d6c8df30ae4f9/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/95b5c650d9a1d3276cc3a3f7e3ee6f110fafef59015174e665349ba5c6a3368b/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3d0de9899f6e979091a1b2b620ece811472ce8ea44650ce341597eb17a566cf6/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/107.172.22.3","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/129.121.62.230","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/45.207.219.249","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/188.190.9.250","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/64.227.97.214","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/173.249.24.135","label":"ThreatFox","domainType":"other"},{"url":"https://urlhaus.abuse.ch/host/185.113.10.26/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/44.214.239.245","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/2a9d70d79cf080d7037f624722d40c4f39374f2a4459d3331ed608c293b0176e/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/deepfield/public-research/tree/main/potassium","label":"ThreatFox","domainType":"primary"},{"url":"https://any.run/report/9b43bb4e22b438ef28ea41f29c755d71a825950c70a11fa9c569dd02bca91129/2af2b954-72a8-475d-b94c-a726d8ded008","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/203.98.68.25","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/45.86.86.12#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/165.245.152.105#3333","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/159.198.41.184#443","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/115.190.130.221#9433","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/103.20.235.143#3333","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/164.90.149.44","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/165.227.201.98","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/165.154.227.150","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/181.235.13.54","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/198.54.125.193","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/218.255.11.218","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/187.194.135.186","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/103.120.175.59","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/af919251deffa6c7a9ff6f2f88a38ae982b365823e13f814a4c73cbb67a30de3/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e32e83e12401c61c64f37e682864b4db40987aa06ae6ca29e951e100f55f4619/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/633700324ad7abdf0fcaee0498e4d3bef9093c51ee4d611e02303e0f8f1a58e2/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7a208815a33bd0cdd8c17129108e55bf1a49e8a57846bc53135759bd045bf9e0/","label":"ThreatFox","domainType":"primary"},{"url":"https://magnify.modat.io/hosts/188.119.149.238","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/2.27.248.209","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/216.107.136.85","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.227.32.90","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/144.91.93.188","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/82.131.156.235","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/120.26.248.222","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/130.49.213.223","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/111.248.217.214","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/45.56.76.53","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/154.213.191.161","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/171.4.194.58","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/94.125.101.85","label":"ThreatFox","domainType":"other"},{"url":"https://magnify.modat.io/hosts/102.220.163.36","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/c66f94f6f054c6ca06e6561aed88fe54d1ea76bfeb8b5cd8a97c71590f08b063/","label":"ThreatFox","domainType":"primary"},{"url":"https://vx-underground.org","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e7a8b3df8b07fb6b0262ad835e0c42933339067bf450edd3f4bfae9d3d9fd42a/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a44c6ec422496a206cc382544413dbd9bdf293a07ff60fe32dfd2055f357bd31/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/785de4b2439f127566906ab1abbaa80562fdb730bc0e5c3f4d0d0c6a5af5330f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2b71cb025eb40b04a2c1932aecf970370260a7d4174b4d08aff1ae7196bc8d25/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.shodan.io/host/211.22.95.122#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/185.193.126.216#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/158.94.208.218#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/148.113.174.77#31337","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/122.114.12.102#12340","label":"ThreatFox","domainType":"other"},{"url":"https://www.shodan.io/host/122.114.10.134#12340","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/b505b754a4a8323a8aa680c15e00b1141405e7112a3260b6770dbc7ff55ed1a6/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/80966dd91fb4f2b41cc4303f334e83bd9065266b99faaa58ef00357e5a5dd1b0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/39d76b97f4b74e65a8285a3b273926dff27af56a42408e5f4d98c202a6f35514/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/84390d22be07c796cd67d1f8e83a5c298a045eea938c5062267b5d8a1730ca67/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.joesandbox.com/analysis/1985204/1/html","label":"ThreatFox","domainType":"other"},{"url":"https://censys.com/blog/darkswords-panel-sprawl/","label":"ThreatFox","domainType":"other"},{"url":"https://censys.com/blog/darksword-coruna-open-directory-finding-report/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/92054967598e5fb72431383cfbb4b295d42abbde1a2a3ab157326d12ed065218/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/209a201ff990f670277ecac05dfdd47df6e4994eafb5edc951063793dd5e1631/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3d5e248553560ac79b13e46bf8928a9832ea9a782c973d1c303f5236c427158b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/b90d79d2a054eddec4439c9821c4ea1a20cb674200315ea772e47419649a45b4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/98ae4104c3c89c8cf226f46c63ef6ee6a827f6cf48819a1691aba974128fd1b7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a2c657d444e0eb521fe607bc9ab8b1973c6dfb2491e38ec7af1ba0e11e3d2cd9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4a5ebb6b3a57d38caecb10cd82b8858e384a44875eefdba10cb8b478527fe264/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ff9199f95e971bb88346a2e6cdff81a7bd89d4b99ea46be005e32ff85606c8da/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fafde0e22150c3eba1eb48ea2a64d6708e9a53f0e9eb1b6eda249deca64a74f9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a25c2f61baffb62e56e161682a8fae587e2ff853d47c2b4a8d1564fb7ed93327/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/6df8ffa08152c1ef097a2caa52675c4085cc459d1d7e28053cfc8a451a8432aa/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/dbe192ea36ed20f78c54b322bda0bab81f647c4bb7df42cdad3ef74ebb8f56bc/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a5f381d3fae86aa9b0f3a22aa7ce23594461eb635efa9a638132bcf5bb86db53/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/dominion2/reverse-engineering-and-malware-analysis/blob/master/report/bridge-agent-hidden-desktop.md","label":"ThreatFox","domainType":"primary"},{"url":"https://blueteam.cool/posts/flomo-onedrive-sideload/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/417b59d97637d2b392b1704a7b5fc59a18a1dfcc13287466ca7707b1a32b4bf6/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/ksi-digital/threat-research/tree/main/mirai-dns-xor-c2","label":"ThreatFox","domainType":"primary"},{"url":"https://polygonscan.com/address/0x1823A9a0Ec8e0C25dD957d0841e3D41a4474bAdc","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/7a2feccbbd016be9a383025f686c8fc44bcdbb7a175b9591cf743bca7bafd82f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/531540654836a5e5add5fe08432bc17c3582c1b0692b411278b1c96a3e5fe8db/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/913792a7cec3a062742f3390d7941a7e95aeeb7e1537e4a52590049d54c5c5e8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3461b395a20846cefef84d6f7ddcbd7aff2209423eaaf74925ab70b0038e160a/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1af9bf77ddd6ad2d6dc263abf4b64f9ff72b1d5a73ed54c79e5482f2841c7ccf/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/76b419ca169209c43d52d1e3e9c6c34801e9afac9af5c3066713bc8b048a7487/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/891eb71eb33f8b02a97c80a3c003ea7d53f4552e63f81f0c6dad073960695d79/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bb37893f7690e7ad8ce3a5aa33e8fd922475baf1c02e28b1c54c45f4c9343cc3/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/09da45e7bcee737ec3814e3b90dcad2fe4151e6871a92526cb182ced38ef638e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/403e48b84d746dd2f6772ed63679acea36508e9bee762049431117a214537932/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/6311ea78a411b08f1939924028fae1f3f63943aa9a3dd08f319ec244a4bcf997/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a15f30f20e3df05032445697c906c3a2accf576ecef5da7fad3730ca5f9c141c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c373be374ca2e92cb015dca9e571f89103be65d12e6af224c94ac033c208761e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bbb93295a53d22150eef772cc4ab5436e769f97041e741d6377c9373468c03ad/","label":"ThreatFox","domainType":"primary"}],"feedLabel":null},{"id":"threatfox-1974933","source":"threatfox","category":"threat-intel","severity":"critical","title":"payload_delivery: undefined","description":"https://bscscan.com/address/0xBA8B70D5B15cFbFD628F71560aAb996356c0fa84","indicators":{"cves":[],"ips":[],"domains":[""],"urls":[""],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["Cloudflare","gif","PHP","webshell","WordPress","workers.dev","wp-admin","BSC","dead-drop","etherhiding","smart-contract","freight-lure","panel","RAT","NodeJS","Vidar","c2","ec141392be2e474ab700bf353b3b9f2c","Loader","stealer","ClearFake","ClickFix","EtherHidingMagecart","mac-0x68dc","macOS","HadesStealer","HadeStealer","elf","IoT","Mozi","46ffc506f663afc29ff2cb6c97f94000","mac-0xdcf2","mac-0x0f14","AUR","CHAOS","DirtyBlanket","linux","onion","systemd-fontd","gitflic","wayback","SocGholish","55001da20373e92a4261b69e9f1087ac","btrf36","Coruna","DarkSword","ios","SilentNet","SmartApeSG","error524","fedex","PhaaS","smishing","1718e0679220166cf123fbe6e40c635c","d852ede598d72f2b3a4050576466ec62","DHT","protokol","Mac","Kongtuke","Amos","Foxveil","ErrTraffic","Polygon","remcos","moobot","asyncrat","Remus","MacSync","ZigClipper","quasar","Android","GhostBat","ghostx-panel","mParivahan","veltrix","apix","fake-git","powershell","IRC","k4_irc_bot","jar","minecraft","abe-bypass","com-hijacking","hermes","hermes-stealer","infostealer","6713982832fdd0efe07912b12c5c5b2b","379e62cc9396a8acb287a1e7d775797d","c7a50169dbc6d842a7e7d349513f88f1","Mirai","DCHOST","guloader","exe","RevStealer","OffLoader","codec-cache","cve-2026-96656","miner","plex","funrat","MaksRAT","PussyRAT","TON","auditpolcore","DLL-sideloading","OVH","CLOUDHAZE","UNC7072","DIVINEX","DvnX","WARDENStealer","YapStealer","ContagiousInterview","DPRK","fake-recruitment","RuntimeBroker","Websocket","DDoS","garble","golang","minefox","ab0a59f4970a96fd6e8daa4f6f8e22cd","b9df72d092aeb25d8cb28d34cc4984de","fallback","go","legea","fabric","java","DGA","Amadey","SalatStealer","xmrig","dropped-by-OffLoader","gamaredon","GammaSteel","CobaltStrike","drb-ra","modat","b89d843f29af2eed09805e9767a1165f","d85b02740b9fbbe0bc098debbc5a5109","sepolia","AppSheet share.google zip PureRAT","runelure","validin","valleyrat_s2","f7e0bdc53604a00d861131d2693a943c","huggingface","SpacesForRent","Stresser","Github","Stealc","RemusStealer","c1399bfb1be0a51415613edd6f0068c5","d42249d8b3409d0cd65c3cc7f8267ec0","1ca8afc0e9497e2ea687b455ff40cf1e","zero stealer","cab","Certum","Dropper","EV-signed","payload-delivery","pycached","python","signed","socketio","skimming","victim","5ecaf10790d5f89db8606b207b2143e4","compromised","etherhide","fakeupdates","PayloadDelivery","stager","botnet","malware","XWorm","cracked-software","RUST","staging","vscode","vscode-tasks-folderOpen","PLASMAGRID","GHOSTBLADE","supply-chain","web-drive-by","Mythic","MythicC2","Poseidon","ScreenConnect","msi","cowrie","dns-xor","honeypot","OpenNIC","tauri","fake-steam-client","phishing","Steam","Magecart","fake-ai-tool","Overlord","SloppyRAT","GomoRAT","GhostRAT","Gh0stRAT","FakeLogin","YoungLotus","applescript","ValleyRAT","dcrat"],"malwareFamily":"php.shin_webshell","confidence":100,"publishedAt":"2026-10-20T02:44:31Z","fetchedAt":"2026-10-20T03:00:02.155Z","references":[{"url":"https://bscscan.com/address/0xBA8B70D5B15cFbFD628F71560aAb996356c0fa84","label":"ThreatFox","domainType":"other"},{"url":"https://bscscan.com/address/0xfb9B234CdcE6dd9E0Eb4895b5682eBebE0b3D277","label":"ThreatFox","domainType":"other"},{"url":"https://bscscan.com/address/0xCc4BCd51e0eA7E254b0F30044538F6Cb86a4E61b","label":"ThreatFox","domainType":"other"},{"url":"https://app.any.run/tasks/3537575f-fe86-40ee-b50a-f40498e5cfb5","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/139.135.43.143","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/59.96.138.199","label":"ThreatFox","domainType":"other"},{"url":"https://www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/","label":"ThreatFox","domainType":"media"},{"url":"https://infosec.exchange/@monitorsg/117469525952388245","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/vxunderground/status/2112234562805739834","label":"ThreatFox","domainType":"other"},{"url":"https://www.group-ib.com/blog/error-524-decoy-smishing/","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.37.137","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/111.92.157.249","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4cae4c533e96cfa71e62966c8fa6339e1188629d2f0cfe86e040e733e10450e1/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/08e7c04e22c51313e5095f2db39e11fcc59adf56a63481ae92d8730e2788edc7","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/84cd8bf6fa43ffc59f3fb3046933be0c650ef063a106b92b020580b51bdc9288/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/dc92065072ed7815c08f402351c3619c71345005aed0781abb9981559a6291c8/","label":"ThreatFox","domainType":"primary"},{"url":"https://app.any.run/tasks/7fe90473-d0aa-439d-b0b4-18aa3019f8a4","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/fc255863ceab40f2510ddf29801e583015505861777f1c5d7e72ec164920f075/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/124.29.247.45","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8f9b2ee97e673d73876abbc952ac533f881749baba69d07a493c3f66d802fae0/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b05f89e41ee8a6613461bdd57362772258f7fd8383a5d013a7965f3fd8f08eb0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ab95aaad2d69b0d587edd35cad42e3c13012a43ecd614da6b50a632c4d25a8ad/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/b44d8553cf97dfde3046e3c55e73bb68e7666c057bdd89f2c6528f7f8269deae/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/100.165.0.207","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/119.73.19.84","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/43.230.94.184","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b5d4aba0fe4004e851756d0329f0c165db2c1667c7c73516e0f1537c9afd3298","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/61f8e4e3e263934a04d18e29fd5edaa0840b1a8137b649e8241e5bae013f200d","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/reketepizza.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qualicost.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ufa365.academy","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sexstories.beauty","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/warpfins.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/temdetudoecommerce.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zenithcomputers.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xocdiapro.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zmops.io","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.yumweb.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/visadubai.com.vn","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sandandgarden.com.mx","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tuasesorcontable.com.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ufakick.group","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/v2.bulwarrestauracja.pl","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/176.65.139.76","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.19","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.251.100","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ngob.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/photographicmemories.uk.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/milestonedentalassisting.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.nurmas.com.tr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/rtpibetslot4.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/prefirobh.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/roadracerx.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/produtecnicaagro.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/pofcolombia.com.co","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/moncler-outletjackets.us.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/nwfc.io","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e395c5343703a570d12620c81b9593ea6117d2f57c95bd8247704d9dbd256ce6","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/leo88vn.vip","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.izmirtaskaplama.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/iberian-trade.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/megacricketworld.me","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/machinegame.com.tw","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/luiseduardo.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lightmagazines.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lamiradadelotroediciones.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.kurashitalia.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lottovip.lease","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/intechpol.pl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.guncelbetvoygiris.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/i1-social.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/85fce9826974549c2dd4c92a3207cf2543e10676ad2dfad7c8ea429f616cdf21","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/rosales20bar.com","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/dcdfb5866c594ee0f92149fed4efcc2b243bf4da1f747a3b2e0b680fdd483df8/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/182.117.28.216","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ucerma.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/meritadlaw.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2b66b4b8780569cd63159360fbc53761d6ba15c7635c977976d55c77d1d93079","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8ad8e7b22405a2368fe8b4a71c85311ed6846a159c911d6d068bd06e6c29ec6d/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.nomadblends.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sinosprint.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.reginaldtjackson.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tecnobrasautomacao.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/shinemusic.ca","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/orofranspain.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/joknsdfgjojipogfdfgsjksf.icu","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/89a25311145ada1664428064bc5b4ae16ec3e322b1399f3d4e753de8aba3ea06","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/megacool.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://winslow1984.com/books/threat-intelligence/page/hey-you-hacked-a-hacker-are-you-ready-for-my-revenge","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.32.82","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/5d123596bdc088235282a1eea5431bac06440d7dded87a8ea6e8af2ac4707144/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7c997959c5f233b07bed777d6477ad2cee3c316447dd4bff3ed77f952211d70d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/4d05b7ecd6db6ed76e6e5597f4e8a3f36ac3b55dd16874977b4b0db365291e6c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/domain/maximalmaxing.com/relations","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2077b5bf06f645fa7d299f0bec157a160f1ecd8b3865c820e981a70c44aed9c3","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/5d025ebb863503212582370793259517992800c729c3a25f1d452e161b6c5bf4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/adf75ee42b2de8321da9260725792634c912cf682301a4e405873242555be33e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/315e87a089566ffdeeb7df30152bb00001e3dd496f55fa0f2c0b7b72b5be38c6/","label":"ThreatFox","domainType":"primary"},{"url":"https://urlhaus.abuse.ch/url/3951406/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/naharamritshakti.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.85","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/175.107.228.54","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/spruillcapital.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bj66vn.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.teamcase.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ucerma.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/v4travels.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tryggtkapital.se","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/liftsystemssolutions.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wetzelmassage.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/livebj66.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wr2.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/webbet168.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/monstago.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/theyouthtakeoverproject.org","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/valoconsulting.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.paolayenay.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/nitcoenergy.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/realstrikklyhiphop.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.lovingthejourneys.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/scentury.vn","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/reynolds.mw","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/slotlink.co.uk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sbokubet.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.sportmusicplay.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bj66viet.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.synergysparq.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/streamlineagencies.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.smartchild.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cfpj.tg","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/creeyacht.pl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cricketpuns.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cie-felicettechazerand.be","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/charlemagne.ma","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/grupojecam.com.br","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.iusversilia.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.espacesante-suisse.ch","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bentleyg.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/pigeonsafaris.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/113.238.162.54","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.82","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.121","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.welderswelfare.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tjcreative.org.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/topendtacticalstore.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.verttige.tn","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/volana.io","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.vidieckymakler.sk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.sardantinfortunistica.it","label":"ThreatFox","domainType":"other"},{"url":"https://blog.efespain.com/en/chapter-32/","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.spanishlessonslosangeles.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/yelphelper.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sskdesign.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zlab.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/therapyclinic.online","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/thetutimutabazi.org","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/zenequitycapital.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/personalgym.in","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/pizza-primavera-wiesbaden.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/traceembrace.co.za","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ufa007.tv","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.penyabarcelonistavilanova.cat","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/podhomestasmania.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.vasservending.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.reliancegranito.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/realblessingpro.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/samratech.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/samsunsesisik.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.ridgelineroofingandgeneralbuilding.co.uk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/olivercash.co.uk","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/nlspronos.fr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/namhuzz.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/manamas.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.sicilyfoodmannino.it","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/mediaindustry.org","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/kinpms.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/falaqnurserybd.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/geometre-simon.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/osolalkhebra.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/inversionesaltasizhan.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/isifarmer.es","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.jacarandabymar.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.iuriqa.legal","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/jsa-koffer.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/just-foryou.fr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/jauntygroup.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/jozsefpizza.hu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/konfiableplus.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/fxplus.com.tr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/gconsulting-ci.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.15.186","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/39.34.191.156","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.13.10","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0667e459fd54a7467f91ef82d5ed580f80e8887e344035abeb748b8c68298802/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/df23fcc6c9b57d69983761adb3977da6f6d0c35a81503bb17d9d94f92146353c/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://modrinth.com/plugin/universetiertagger","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/efc0f30e9b1c8e4b1479006ecdcc95d5d4fa0627af8b294a6babe57da17b58d3","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.50.215","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.52","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/111.92.157.206","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/104a6e4b1da8f7b42bdaf887b82f2c12348c6b1ffe52d1de2d964b6329492ad7","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/8360a40c7eb801b653b9f2180c9b3dc49fb9c6ed139f98e2491aa031f69052a8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fb799fbe2729fa88358d32375c15aa41b2de62e981655e60d4f53efb4e4fee73/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/463f56104d5b9459918a39fd23d28937c1c7a1f88d8c3b6e48d6755fc0bbb7c7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e5b790c3a237edc2c55f01a7c648d0eaf8e969a1a9223aff605a90a1d42900b7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a16051a12512942c311bbaa96fb31bbe1fe56568ef879d238395d498cdbd2f2d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3874acb3e5c6f472da7df4ed3dd354c882ada48dd7838ec6c54ef2628d204389/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d5a8157be3b6069a336087b0611e266ddfcd062d5c2674bc8f16d754ea017169/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/44272f1f153709662b3b973e7b4a601df852e7eae3dd9a22661860394889b1eb/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/125.26.175.150","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.194.167","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.diginas.fr","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/www.cloudguild.tn","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/cefb465886bc813ac91e9ad5b1835eefe9828f251b58eb0da012ee4022ff6d98","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bhumivista.com","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/42.230.35.117","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/223.123.43.62","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ae6e815981ca4ef79e01a1bbaf3927bfc557192c288cb31436ffb9366ef03077/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/tools.lumma.cy","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/admin.msxfweb.net","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/clevershop.nl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ntrw.nl","label":"ThreatFox","domainType":"other"},{"url":"https://infosec.exchange/@monitorsg/117450999763033246","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/mooimanmode.nl","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/uzickanedelja.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/tradecorp.com.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/googlegemini-earlyaccess.com","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/32dcaf5c4f41dbdaddeee5fd64dacb290f81655a37ea10beaeca1a369a80c7f0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ebb2f6d9ee6731d87d430b7c9114d4fa02ffb5adba565da3ffda7cca0afb2353/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/153.117.15.107","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/223.123.43.133","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/202.47.55.3","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/b08bff811d20fb95abbb8a09175f33a749c1dff6967b86e583ba5f5ee08872e5/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/report.cyberwatcher.de","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/te1egsdxinn.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmyinyueqishui.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qaswedcameitu01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsxwangyiyun.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmswsdayiwaiwai.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bsadxgugefy.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuyiwaiwai.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsdianzqmguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ngjhgghdsftujfdshdhsguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmbsaasdzaqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qazxswdguge02.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmsdazsliuguge03.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sdfaswasleidian01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbzadcfssdxxtg.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/asxcdskdwedgugefy.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bsdaxguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexufanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sadsxsayiwaiwai.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbssougoushurufa.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsxdmeituxiu.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/disnasaskdjaxksjgg01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsxdsougouliulanqi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/asajkdjkxsiasdjaguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bostaiwanline.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wsadaxiangrikui.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsedxyifanyi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sdxfdabiteliuanqi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsskjhjawsdjhfggfanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bssdazguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/hbwney.com","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmasxwedmeitu.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmqxzasqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/kajskdwekdxchsdgugefy02.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xslaksdjkalkssdguge11.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cadsacdsguge02.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sdxcsdeaguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexumeitu.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ytzsadguge1.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyqxuguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ssdjskdcasdjafdfkgugellq01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuleidian.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmyinyueaaqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/aswdczayiwaiwi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuxiangrikui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmdadxiangrikui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wsasaklsdkjasgugeliulan.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmbsadxdyiwaiwai.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/sansdesougou.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/dsaxsaddfanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmazsdqatd.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/dsxaszxleidian.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/bsasdxdaqguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/daasxzdwqaguge01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ggcheonegoovnfgg.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/saswsasyifanyi.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xskjaaisdkajsxcgugefy.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmbszasdqyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wassksdyiwaiwai01.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/yiygdfanwesyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/te1eguuxsnrnn.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsazqdfaafeiji.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmzsxdmeitu.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/wuyexuqishui.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/samsdqafeiji.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmsdsaaguge.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/yiyuxxfanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmswedyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/cdngsnsaassefgagugefanyi.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/lbbsedxyiwaiwai.icu","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/202.146.222.253","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsaindazguge1.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/192.253.229.191","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/xsjazscedguge03.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmasedfxleidian.top","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/qmyxdfsyoudao.top","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/457574b398a56d96c0427bed59bf2606aec1766e4613d2dc2b838a198e72ded4/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/pxb7.online","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/95b5c650d9a1d3276cc3a3f7e3ee6f110fafef59015174e665349ba5c6a3368b/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e472cd7cb92d7e00bc46eef47b0a06e194329c8ef52acb7a7749b86d661cc054/behavior","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/43.230.94.187","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/153.117.1.182","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/2a9d70d79cf080d7037f624722d40c4f39374f2a4459d3331ed608c293b0176e/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/48mko9hrqrdwuvj.icu","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.6.167.113","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/125.47.84.76","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.224.45","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/42.227.203.38","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/c25ead077458ff215c8ef109b2c86e9b8a3c2a63f6d229b721382b035816633e/","label":"ThreatFox","domainType":"primary"},{"url":"https://any.run/report/9b43bb4e22b438ef28ea41f29c755d71a825950c70a11fa9c569dd02bca91129/2af2b954-72a8-475d-b94c-a726d8ded008","label":"ThreatFox","domainType":"other"},{"url":"https://infosec.exchange/@monitorsg/117446039197587616","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/139.135.46.97","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/41.216.225.80","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3e4313662c1ef316bb7095b4f8f9b47c9d0b2b7050ec6d3a1ac4440d43fb2d1b/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/45.171.124.23","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/6b68a1f5df0a2e64d8d5092dacf355a35bbab4e7d5d6c193234a05bc5037dcbc/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/d5c773e139cfc3eae4d811b8782758c14899d262256cfc29fd0f8ac69fd6949e/detection","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/vxunderground/status/2110222399241126337","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4cd3529fc035c278beb7474fd6e78aa6316bc908e105f8e12bb6ab0e79a2bc55/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1d9c00c7e9e917b91a1070249c9278ad033d2c834637a081bf66d0e6533504c0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/8fcedb21d6f2fa9ab3e01ba27cb004aa57cf637eb85b25d2f7de1abf8f57d4e1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bdb41086f3b18563b26594aecff13548ef42978a55218f6baebe0041f78ac3d0/","label":"ThreatFox","domainType":"primary"},{"url":"https://x.com/orlof_v/status/2110308506255417764?s=20","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/499cb7ae6c385c77d3eb663394e552626621ecac74d86c8dc392f4098886927d","label":"ThreatFox","domainType":"other"},{"url":"https://infosec.exchange/@monitorsg/117441801105382312","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/176.65.139.40","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/182.190.212.190","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/190.196.253.64","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/976aff8d066d00667f9ebeea846c87fb0f7a6d86aaca725ae06242a6b43ef6d9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/85bbb20814fb9989803918ae9771cfba9cde599d93924f54c41f008b1996a5fb/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/152d4753839330b04a221d9e97093de27dcf5a4231fbd948940da26d909dd5b1/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4cea8fa258183dcb8a7d4276291b800de7cd50207c273c2c78551afedb1fd91c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/88c5cf4e9d867c792efdc8cadac668b864a632deb887cf6d7d97a1cb79cd8dfd/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/0b19b12b0919cf3bb6904355593948a5077f23f81aca05ffebf60f81eb860ea2/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ff113135f91e732050a8cba3281dd73926f356d6021e55019c3b3fa2ee5d9b60/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/196.190.157.180","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/39.34.164.239","label":"ThreatFox","domainType":"other"},{"url":"https://www.threatlocker.com/blog/malicious-vs-code-tasks-json-abuse-enables-multi-stage-infostealer-deployment","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6a8328485672fbe0505095daf01ffcbfb6b9fd6b5efe788e4ebb523257418513","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/20145","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/open.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/new.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/llm.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/hk.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/fast.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/code.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://github.com/dominion2/reverse-engineering-and-malware-analysis/blob/master/report/darksword-coruna-implants-and-dga.md","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2e5a56beb63f21d9347310412ae6efb29fd3db2d3a3fc0798865a29a3c578d35/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e02855a0c4e27b793644eaf6446da9596ed8d2d3c37b580beb111738010de441/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/64c52a52d64ea44a8b8e1a9fa367e37a9940f847fcd142182711b1b862efb8a2/","label":"ThreatFox","domainType":"primary"},{"url":"https://censys.com/blog/darkswords-panel-sprawl/","label":"ThreatFox","domainType":"other"},{"url":"https://censys.com/blog/darksword-coruna-open-directory-finding-report/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e0bbae0176649920bdeb0dc5a16cf71e010550e711e4c400d2f72cb83db5451b/","label":"ThreatFox","domainType":"primary"},{"url":"https://github.com/dominion2/reverse-engineering-and-malware-analysis/blob/master/report/warden-stealer-static-unpacking.md","label":"ThreatFox","domainType":"primary"},{"url":"https://www.gendigital.com/blog/insights/research/warden-stealer-rust-infostealer-analysis","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a1efcf4e1c2ee9a4a887ec9208a7f69c0bc360677db147161cad1e54520780fd","label":"ThreatFox","domainType":"other"},{"url":"https://github.com/ksi-digital/threat-research/tree/main/mirai-dns-xor-c2","label":"ThreatFox","domainType":"primary"},{"url":"https://www.clickfixed.uk/intel/20115","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/ibespai.es","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/api.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/admin.lzgqin.cc.cd","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/202.47.48.49","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/144.48.132.30","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/144.48.132.100","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/juplterairdrop.cfd","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/124.29.226.98","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/139.135.43.98","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/172.168.163.83","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/486277d29cbefcbd321d7c7ad5d72bf1983c110206ed607c6c371af7f7741308","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19999","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/913792a7cec3a062742f3390d7941a7e95aeeb7e1537e4a52590049d54c5c5e8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/cdd73b09c6ebb602b7939fb55bcb663ff93fb844cf7b291e5ed635f9fc69db61/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7f1db334fd3302cf98dd4afddf6f90e98e2a496fe7e86bf1832b89d02f3d73c3/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/5e3811b8de57be355ed6d51518502b070e63afd7bc0f33d49298bd5c94ed245b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/abc19d78d94158d057220187860ce7781187c9a74667e34689b46637f86684d7/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/105.186.85.167","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/100.165.7.37","label":"ThreatFox","domainType":"other"},{"url":"https://clickfix.carsonww.com/domains/karmazarbaza.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19957","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19959","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19961","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19962","label":"ThreatFox","domainType":"other"},{"url":"https://www.clickfixed.uk/intel/19964","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/2baaf219716c21543de54c9e51802b4e9970ea8bf43bbb01537abe15f4dd7e7d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/84025cfdc41458df372f199ce64cced15e9925a5b70cfeef77e64bd2df8df07d/","label":"ThreatFox","domainType":"primary"},{"url":"https://clickfix.carsonww.com/domains/ecodation.com","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/a37845bf7a3b2d27154fdf24dfa147b1f4e97e6a710123cdb5f1f88bd3299074/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c66116cfe82dc563239bfbd7ac4f91e1e9af966f7729212a3c9f32d197bf0985/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/39.34.188.177","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/39.34.143.221","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/103.203.88.64","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/4777c49910b352e3c0eedd6ae9e5a74e1c68fe80e09e42fdb0622a1f74835e79/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/76b419ca169209c43d52d1e3e9c6c34801e9afac9af5c3066713bc8b048a7487/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2f1236fc3d15bbb9d43554a058e1bf6d63a2ee3e05ac4ff5277d824bd881dfbf/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1327c0684c8341d3d17b035c63315df93d6315b97b9484f1075b9bf251485e15/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d0a798b5e7ef375f640e4f4f2329a8e40c6ea4d9f65ce63d513fc1b00ad1da71/","label":"ThreatFox","domainType":"primary"},{"url":"https://polygonscan.com/address/0xA3a603F8a454a9c905b4c579Bb72628F7C15C2A0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e0e218a1ce45c5a7c2e777f52d466334671c583469c6d489a94275c5a3341ab2/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c50aaeeb818ba3fd2ff56ff05702286ee3700461f84d2b499a0de2a4c99f5cdc/","label":"ThreatFox","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ace7dbf73fb0a8d1beeba9b","source":"otx","category":"threat-intel","severity":"critical","title":"RSVP to Disaster: How One Click Installs a RAT","description":"Cybercriminals are exploiting digital event invitations to distribute remote access trojans. Victims receive legitimate-looking emails with generic subject lines about special gatherings and celebrations. The messages contain download buttons that redirect users through fake CAPTCHA verification pag…","indicators":{"cves":[],"ips":[],"domains":["theinvitationestateco.vu"],"urls":["https://theinvitationestateco.vu/EdesktopInvite/RsvpNow/invitedetails.php"],"hashes":{"md5":"739a54032b89432bb4c9c33969f6b383","sha1":null,"sha256":"f3aab811ae8163e09db40db201facc7e189d1a1b161be265202ca54b39b5e6cc"}},"tags":["captcha manipulation","social engineering","connectwise exploitation","fake invitation","remote access trojan","screenconnect","phishing campaign","screenconnect abuse","holiday-themed attack","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:51:43.410Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ace7dbf73fb0a8d1beeba9b","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"news-drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon","source":"general-news","category":"news","severity":"critical","title":"Drupal patches critical RCE flaws, warns exploits may emerge soon","description":"Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T14:32:48.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-weekly-recap-98-zero-days-rogue-ai-agents-100m-crypto-theft-700-supermarkets-hit","source":"general-news","category":"news","severity":"critical","title":"⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More","description":"The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done.\n\nThis week had plenty of that. Trusted connections became a p…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:14:07.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/weekly-recap-98-zero-days-rogue-ai.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-uat-11985-uses-fake-event-invites-to-target-taiwan-research-affiliates-with-goog","source":"general-news","category":"news","severity":"critical","title":"UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing","description":"Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google accou…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["apt","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:16:44.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/uat-11985-uses-fake-event-invites-to.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-china-linked-hackers-exploited-beyondtrust-zero-day-to-take-over-remote-support-","source":"general-news","category":"news","severity":"critical","title":"China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers","description":"The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.\n\nThe vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case o…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:55:55.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/china-linked-hackers-exploited.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-threatsday-adobe-rce-dns-wallet-theft-nvidia-container-escape-self-healing-backd","source":"general-news","category":"news","severity":"critical","title":"ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More","description":"Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories.\n\nThe rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:49:33.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/threatsday-adobe-rce-dns-wallet-theft.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-nginx-fixes-5-flaws-including-possible-rce-and-a-tls-bug-that-may-skip-client-ce","source":"general-news","category":"news","severity":"critical","title":"NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks","description":"NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.\n\nThere are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specif…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:58:05.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/nginx-fixes-5-flaws-including-possible.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-next-js-ships-out-of-band-patch-for-two-critical-rce-flaws-in-caching-and-svg-pr","source":"general-news","category":"news","severity":"critical","title":"Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing","description":"Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.\n\nOne code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Nex…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:28:13.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/nextjs-ships-out-of-band-patch-for-two.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-drupal-patches-critical-field-ui-flaw-with-unauthenticated-rce-path-via-contribu","source":"general-news","category":"news","severity":"critical","title":"Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules","description":"Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19.\n\nAn attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:07:20.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/drupal-patches-critical-core-rce-flaw.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-palo-alto-networks-patches-pan-os-authenticated-rce-flaw-amid-active-exploitatio","source":"general-news","category":"news","severity":"critical","title":"Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation","description":"Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation.\n\nThe vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface.\n\n\"A remote code execution (RCE)…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:46:49.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-langflow-s-critical-authenticated-rce-flaw-targeted-in-1-423-honeypot-exploit-at","source":"general-news","category":"news","severity":"critical","title":"Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts","description":"Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian.\n\nLangflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, w…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:07:05.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-beyondtrust-remote-support-zero-day-continues-trend-of-exploited-edge-bugs","source":"general-news","category":"news","severity":"critical","title":"BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs","description":"Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:34:37.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-when-your-ransomware-negotiator-works-for-the-other-side","source":"general-news","category":"news","severity":"critical","title":"When Your Ransomware Negotiator Works for the Other Side","description":"The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/cyber-risk/when-your-ransomware-negotiator-works-other-side","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-ivanti-ics-zero-day-attacks-highlight-vendor-patching-hurdles","source":"general-news","category":"news","severity":"critical","title":"Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles","description":"CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday","ics","rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:20:13.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/vulnerabilities-threats/ivanti-ics-zero-day-attacks-vendor-patching","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-ransomware-gangs-embrace-physical-threats-family-stalking","source":"general-news","category":"news","severity":"critical","title":"Ransomware Gangs Embrace Physical Threats, Family Stalking?","description":"Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/cybersecurity-analytics/ransomware-gangs-physical-threats-family-stalking","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-zero-days-lurk-in-microsoft-s-overgrown-october-patch-tuesday","source":"general-news","category":"news","severity":"critical","title":"Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday","description":"The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:29:57.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/vulnerabilities-threats/zero-days-microsoft-october-patch-tuesday","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw","source":"general-news","category":"news","severity":"critical","title":"Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw","description":"Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.\nThe post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:47:50.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/drupal-warns-of-fast-exploitation-risk-for-critical-core-rce-flaw/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-ransomware-gangs-increasingly-turn-to-threats-of-physical-violence-to-extort-pay","source":"general-news","category":"news","severity":"critical","title":"Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments","description":"New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/ransomware-threats-physical/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-ransomware-pressure-now-reaches-employees-homes-and-families","source":"general-news","category":"news","severity":"critical","title":"Ransomware pressure now reaches employees’ homes and families","description":"Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had experienced at least one successful ransomware attack. “Ransomware has pro…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T04:00:22.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.helpnetsecurity.com/2026/10/19/semperis-ransomware-employee-safety-report/","label":"Help Net Security","domainType":"media"}],"feedLabel":null},{"id":"news-prolific-chinese-espionage-group-exploits-beyondtrust-zero-day","source":"general-news","category":"news","severity":"critical","title":"Prolific Chinese espionage group exploits BeyondTrust zero-day","description":"Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers.\nThe post Prolific Chinese espionage group exploits BeyondTrust zero-day appeared first on CyberScoop.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:09:09.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://cyberscoop.com/china-espionage-attacks-beyondtrust-zero-day-armory-castle/","label":"CyberScoop","domainType":"media"}],"feedLabel":null},{"id":"cisa-kev-CVE-2025-61624","source":"cisa-kev, otx","category":"vulnerability","severity":"high","title":"CVE-2025-61624 — Fortinet Multiple Products Path Traversal Vulnerability","description":"FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.","indicators":{"cves":["CVE-2025-61624","CVE-2024-47575","CVE-2024-26009","CVE-2025-59718","CVE-2025-59719","CVE-2024-26008"],"ips":["23.240.77.233","47.18.167.159"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":"30fbcd20a44e913f2dfdaa813f8778c699a4b613","sha256":"b7ae166fd49a7ecfe6322a80b8aa56d6aa0825d8f5d106dab2e4fb7d14ce15a8"}},"tags":["fortigate","privilege escalation","network intrusion","cve-2024-47575","telecommunications","memory-resident implant","fortimanager","vpn","cve-2025-61624","peerstitch"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61624","label":"NVD","domainType":"primary"},{"url":"https://otx.alienvault.com/pulse/6ad0096119a185c9dcb055b0","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"cisa-kev-CVE-2026-21589","source":"cisa-kev","category":"vulnerability","severity":"high","title":"CVE-2026-21589 — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","description":"Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an un…","indicators":{"cves":["CVE-2026-21589"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21589","label":"NVD","domainType":"primary"}],"feedLabel":null},{"id":"cisa-kev-CVE-2026-105134","source":"cisa-kev","category":"vulnerability","severity":"high","title":"CVE-2026-105134 — Ahsay AhsayCBS Command Injection Vulnerability","description":"Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-202…","indicators":{"cves":["CVE-2026-105134"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105134","label":"NVD","domainType":"primary"}],"feedLabel":null},{"id":"cisa-kev-CVE-2026-105133","source":"cisa-kev","category":"vulnerability","severity":"high","title":"CVE-2026-105133 — Ahsay AhsayCBS Improper Authentication Vulnerability","description":"Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.","indicators":{"cves":["CVE-2026-105133"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105133","label":"NVD","domainType":"primary"}],"feedLabel":null},{"id":"cisa-kev-CVE-2026-0322","source":"cisa-kev, nvd","category":"vulnerability","severity":"high","title":"CVE-2026-0322 — Palo Alto Networks PAN-OS Code Injection Vulnerability","description":"Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.","indicators":{"cves":["CVE-2026-0322"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.208Z","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0322","label":"NVD","domainType":"primary"},{"url":"https://security.paloaltonetworks.com/CVE-2026-0322","label":"psirt@paloaltonetworks.com","domainType":"primary"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-0322","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-thermo-fisher-torrent-suite-software","source":"cisa-advisories, vendor-blogs","category":"advisory","severity":"high","title":"Thermo Fisher Torrent Suite Software","description":"View CSAF\nSummary\nSuccessful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.\nThe following versions of Thermo Fisher Torrent Suite Software are affected:\nTorrent Suite Software <=5.18 (CVE-2026-107777)\nCVSS\nVendor\nEquipment\n\n\n\n\nv3 6.5\nThermo…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-01","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-j4care-dcm4che","source":"cisa-advisories, vendor-blogs","category":"advisory","severity":"high","title":"J4Care dcm4che","description":"View CSAF\nSummary\nSuccessful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.\nThe following versions of J4Care dcm4ch…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-guangzhou-juan-iot-technology-eseecloud","source":"cisa-advisories, vendor-blogs","category":"advisory","severity":"high","title":"Guangzhou Juan IoT Technology EseeCloud","description":"View CSAF\nSummary\nSuccessful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.\nThe following versions of Guangzhou Juan IoT Technology EseeCloud are affected:\nEseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664)\nEseeCloud Firm…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-eclipse-foundation-eclipse-milo","source":"cisa-advisories, vendor-blogs","category":"advisory","severity":"high","title":"Eclipse Foundation Eclipse Milo","description":"View CSAF\nSummary\nSuccessful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients.\nThe following versions of Eclipse Foundation Eclipse Milo are affecte…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-cisa-malcolm","source":"cisa-advisories, vendor-blogs","category":"advisory","severity":"high","title":"CISA Malcolm","description":"View CSAF\nSummary\nThe following versions of CISA Malcolm are affected:\nMalcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334)\nMalcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362)\nCVSS\nVendor\nEquipment\n\n\n\n\nv3 8.1\nCISA\nMalcolm\n\n\n\n\n\n\n6 Vulnerabilities…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-280-01","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-inductive-automation-ignition-software","source":"cisa-advisories, vendor-blogs","category":"advisory","severity":"high","title":"Inductive Automation Ignition Software","description":"View CSAF\nSummary\nSuccessful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.\nThe following versions of Inductive Automation Ignition Software are affected:\nIgnition >=8.1.0|<=8.1.54 (CVE-2026-92817)\nIgnition >=8.3.0|<=8.3…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-01","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-swann-communications-swifi-se2kic","source":"cisa-advisories, vendor-blogs","category":"advisory","severity":"high","title":"Swann Communications SWIFI-SE2KIC","description":"View CSAF\nSummary\nSuccessful exploitation of these vulnerabilities could allow an attacker to view video information without authentication.\nThe following versions of Swann Communications SWIFI-SE2KIC are affected:\nSWIFI-SE2KIC firmware <=2.0.22 (CVE-2026-107605, CVE-2026-107606, CVE-2026-107607)\nCV…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-02","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93886","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-93886 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.","indicators":{"cves":["CVE-2026-93886"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.933Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7291760","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58249","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-58249 — SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted re…","description":"SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful ex…","indicators":{"cves":["CVE-2026-58249"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:46.213Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3765424","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89113","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89113 — SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorpora…","description":"SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject arbitrary SQL commands. Successful exploitation could allow the user to read,…","indicators":{"cves":["CVE-2026-89113"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:48.153Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3800517","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89120","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89120 — A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorizat…","description":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resu…","indicators":{"cves":["CVE-2026-89120"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:48.813Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3626303","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105458","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105458 — GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 bef…","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypa…","indicators":{"cves":["CVE-2026-105458","CVE-2026-96893"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:56.423Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/627711","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/607968","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108956","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108956 — A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is…","description":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched…","indicators":{"cves":["CVE-2026-108956"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:57.870Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://code-projects.org/","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/thuong2206/Unauthenticated-SQL-Injection-in-Online-Reviewer-System","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108956","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997845","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416775","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416775/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14814","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-14814 — GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute specially…","indicators":{"cves":["CVE-2026-14814"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:58.330Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/604950","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3832707","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16301","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-16301 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorizatio…","indicators":{"cves":["CVE-2026-16301"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:58.583Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/606501","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3853866","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-35001","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-35001 — OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric…","description":"OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious grid dimension metadata that causes memory corruption when a user opens it. In the S102_VG_BathymetryCoverage::Read() fu…","indicators":{"cves":["CVE-2026-35001"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:59.010Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://doi.org/10.3390/s26206448","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/opens100-s-102-parser-integer-overflow-heap-buffer-overflow","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78335","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-78335 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations belong…","indicators":{"cves":["CVE-2026-78335","CVE-2026-92883"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:59.673Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/621535","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3893467","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/629523","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3936831","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-81839","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-81839 — GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 bef…","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group's privilege…","indicators":{"cves":["CVE-2026-81839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:59.927Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/624150","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3925062","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108964","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108964 — A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknow…","description":"A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public…","indicators":{"cves":["CVE-2026-108964"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T04:17:11.900Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/hubdk01/cve/issues/6","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108964","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999100","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416782","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416782/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108965","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108965 — A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerabilit…","description":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been pu…","indicators":{"cves":["CVE-2026-108965"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T04:17:13.777Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/hubdk01/cve/issues/7","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108965","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999115","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999119","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416783","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416783/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108966","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108966 — A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affect…","description":"A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly availabl…","indicators":{"cves":["CVE-2026-108966"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T05:16:31.630Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/hubdk01/cve/issues/8","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108966","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999133","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416784","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416784/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108967","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108967 — A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is…","description":"A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to th…","indicators":{"cves":["CVE-2026-108967"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T05:16:31.833Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/hubdk01/cve/issues/9","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108967","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999145","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416785","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416785/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108968","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108968 — A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected elem…","description":"A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been ma…","indicators":{"cves":["CVE-2026-108968"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T05:16:32.007Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/hubdk01/cve/issues/10","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108968","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999146","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416786","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416786/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108969","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108969 — A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e6…","description":"A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument cookname…","indicators":{"cves":["CVE-2026-108969","CVE-2026-111872"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T06:16:34.070Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/itsmeravitejak/Online-Examination-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/itsmeravitejak/Online-Examination-System/issues/2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108969","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999471","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416787","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416787/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/itsmeravitejak/Online-Examination-System/issues/6","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111872","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005049","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421584","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421584/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108970","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108970 — A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbf…","description":"A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the file include/database.php of the component Registration Form. Performing a manipulation of the argument branch results in sql…","indicators":{"cves":["CVE-2026-108970","CVE-2026-111873","CVE-2026-111992"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T06:16:47.567Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/itsmeravitejak/Online-Examination-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/itsmeravitejak/Online-Examination-System/issues/3","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108970","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/999472","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416788","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416788/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/itsmeravitejak/Online-Examination-System/issues/7","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111873","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005050","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421585","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421585/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/Stjorn/CVE/blob/main/CVE-2026-111992.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111992","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1007975","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421657","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421657/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108972","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108972 — A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this v…","description":"A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authentication.…","indicators":{"cves":["CVE-2026-108972"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T06:16:53.947Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://tracexlabs.com/releases/hrm-10-preauth-admin-takeover.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-108972","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000486","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416791","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416791/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-54867","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-54867 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i…","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affects Responsive Slider: from n/a through 0.1.9.","indicators":{"cves":["CVE-2026-54867","CVE-2026-54868","CVE-2026-54869","CVE-2026-54870","CVE-2026-105881","CVE-2026-108487","CVE-2026-108488","CVE-2026-108490","CVE-2026-108495","CVE-2026-109691","CVE-2026-109697","CVE-2026-107428","CVE-2026-105874","CVE-2026-107422","CVE-2026-107867","CVE-2026-107870","CVE-2026-89069","CVE-2026-105066","CVE-2026-108483","CVE-2026-108484","CVE-2026-108491","CVE-2026-108498","CVE-2026-105882","CVE-2026-109685","CVE-2026-109702","CVE-2026-105065","CVE-2026-108175","CVE-2026-110890","CVE-2026-106604","CVE-2026-109893","CVE-2026-110375","CVE-2026-96339","CVE-2026-110903","CVE-2026-111400","CVE-2026-111405","CVE-2026-110384","CVE-2026-109701","CVE-2026-108485","CVE-2026-109895","CVE-2026-110382","CVE-2026-110897","CVE-2026-110379","CVE-2026-111407","CVE-2026-64944","CVE-2026-111410","CVE-2026-111414","CVE-2026-112199"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T06:16:56.493Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/responsive-slider/vulnerability/wordpress-responsive-slider-plugin-0-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/fv-all-in-one-seo-pack/vulnerability/wordpress-fv-simpler-seo-plugin-1-9-7-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/idx-broker-platinum/vulnerability/wordpress-impress-for-idx-broker-plugin-3-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/weaverx-theme-support/vulnerability/wordpress-weaver-xtreme-theme-support-plugin-7-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/wp-books-gallery/vulnerability/wordpress-books-gallery-plugin-4-8-4-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/powerpack-lite-for-elementor/vulnerability/wordpress-powerpack-addons-for-elementor-plugin-3-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/premium-addons-for-elementor/vulnerability/wordpress-premium-addons-for-elementor-plugin-4-11-110-cross-site-scripting-xss-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/sureforms/vulnerability/wordpress-sureforms-plugin-2-12-7-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/bdthemes-prime-slider-lite/vulnerability/wordpress-prime-slider-addons-for-elementor-plugin-4-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/surecart/vulnerability/wordpress-surecart-plugin-4-9-4-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/ppv-live-webcams/vulnerability/wordpress-paid-videochat-turnkey-site-plugin-7-5-12-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/surecart/vulnerability/wordpress-surecart-plugin-4-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/wp-w3all-phpbb-integration/vulnerability/wordpress-wp-w3all-phpbb-plugin-3-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/jet-product-tables/vulnerability/wordpress-jetproducttables-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-8-16-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/simply-rets/vulnerability/wordpress-simplyrets-real-estate-idx-plugin-3-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/hippoo/vulnerability/wordpress-hippoo-mobile-app-for-woocommerce-plugin-1-12-0-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/wp-payment-form/vulnerability/wordpress-best-payments-plugin-for-wp-plugin-4-6-27-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/everest-forms/vulnerability/wordpress-everest-forms-plugin-3-6-1-cross-site-scripting-xss-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/bsk-pdf-manager/vulnerability/wordpress-bsk-pdf-manager-plugin-3-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-8-cross-site-scripting-xss-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-9-7-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/share-button/vulnerability/wordpress-social-share-buttons-plugin-1-31-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/theme/xstore/vulnerability/wordpress-xstore-theme-9-7-9-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/wp-meta-data-filter-and-taxonomy-filter/vulnerability/wordpress-mdtf-plugin-1-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/jet-smart-filters/vulnerability/wordpress-jetsmartfilters-plugin-3-8-6-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/yith-woocommerce-compare/vulnerability/wordpress-yith-woocommerce-compare-plugin-3-15-0-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/presto-player/vulnerability/wordpress-presto-player-plugin-4-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/download-monitor/vulnerability/wordpress-download-monitor-plugin-5-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/theme/houzez/vulnerability/wordpress-houzez-theme-4-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/the-events-calendar/vulnerability/wordpress-the-events-calendar-plugin-6-18-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/powerpack-lite-for-elementor/vulnerability/wordpress-powerpack-addons-for-elementor-plugin-3-1-0-cross-site-scripting-xss-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-16-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/fancy-facebook-comments/vulnerability/wordpress-fancy-comments-wordpress-plugin-1-2-21-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/paytpv-for-woocommerce/vulnerability/wordpress-paycomet-for-woocommerce-plugin-5-45-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/theme/estore/vulnerability/wordpress-estore-theme-1-6-13-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/booktics/vulnerability/wordpress-booktics-plugin-1-0-29-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/simply-schedule-appointments/vulnerability/wordpress-simply-schedule-appointments-plugin-1-6-12-35-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/powerpack-addon-for-beaver-builder/vulnerability/wordpress-powerpack-lite-for-beaver-builder-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/quiz-maker/vulnerability/wordpress-quiz-maker-plugin-6-7-1-91-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/tutor/vulnerability/wordpress-tutor-lms-plugin-4-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://lists.apache.org/thread/2cjdm4pdrrvj0t6cgcfyo3hot9vq72kb","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/23","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/e2pdf/vulnerability/wordpress-e2pdf-plugin-1-32-57-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-2-9-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/yith-woocommerce-wishlist/vulnerability/wordpress-yith-woocommerce-wishlist-plugin-4-18-1-cross-site-scripting-xss-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103316","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103316 — The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process…","description":"The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES.  An attacker with local user-level code execution can execute arbitrary code within the macOS version of the DigiD app, thereby gaining ac…","indicators":{"cves":["CVE-2026-103316"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:16:30.490Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://apps.apple.com/us/app/digid/id1208460960","label":"cert@ncsc.nl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108973","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108973 — A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue…","description":"A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has bee…","indicators":{"cves":["CVE-2026-108973"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:16:31.290Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://tracexlabs.com/releases/contact-tracing-preauth-rce.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-108973","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000527","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416792","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416792/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108974","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108974 — A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function sa…","description":"A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be…","indicators":{"cves":["CVE-2026-108974"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:16:31.490Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://tracexlabs.com/releases/elearning-preauth-rce.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-108974","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000528","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416793","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416793/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108975","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108975 — A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerabil…","description":"A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The e…","indicators":{"cves":["CVE-2026-108975"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:16:31.680Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://tracexlabs.com/releases/lms-preauth-rce.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-108975","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000549","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416794","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416794/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102007","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102007 — The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin f…","description":"The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapped to notification_content (attacker-chosen key, e.g. payload_text)' parameter in all versions up to, and including, 2.10.6…","indicators":{"cves":["CVE-2026-102007","CVE-2026-104749"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:16:57.567Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Actions/BuddyBoss/BuddyBossController.php#L129","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Actions/BuddyBoss/RecordApiHelper.php#L367","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Actions/BuddyBoss/RecordApiHelper.php#L491","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Routes/api.php#L17","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Triggers/Webhook/WebhookController.php#L80","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3730118/bit-integrations/trunk/backend/Actions/BuddyBoss/RecordApiHelper.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ee912e24-7ed5-459c-a8ce-2bcb265bdeb0?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Actions/Registration/RegistrationController.php#L309","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Core/Integration/IntegrationHandler.php#L39","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Log/LogHandler.php#L290","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Log/LogHandler.php#L553","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bit-integrations/tags/2.10.6/backend/Triggers/CF7/CF7Controller.php#L139","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3730118/bit-integrations/trunk/backend/Log/LogHandler.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/24f112eb-4abe-4acf-a769-c93246e30958?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102562","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102562 — The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField…","description":"The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versions up to, and including, 11.1.0. This is due to insufficient input sanitization and output escaping in the acym_cleanVar() sanitizer,…","indicators":{"cves":["CVE-2026-102562"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:16:59.263Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/acymailing/tags/11.1.0/back/Classes/FieldClass.php#L292","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/acymailing/tags/11.1.0/back/Classes/UserClass.php#L1187","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/acymailing/tags/11.1.0/back/Core/wordpress/security.php#L122","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/acymailing/tags/11.1.0/back/dynamics/subscriber/SubscriberInsertion.php#L159","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/acymailing/tags/11.1.0/front/FrontControllers/FrontusersController.php#L69","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/acymailing/tags/11.1.0/front/FrontViews/Archive/tmpl/view.php#L17","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3729031%40acymailing&new=3729031%40acymailing","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/eb8f03fb-d1af-4727-87d7-58dbe4013d8a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103418","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103418 — Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript…","description":"Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1.","indicators":{"cves":["CVE-2026-103418"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:16:59.560Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2062109","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-105/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106597","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106597 — Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploit…","description":"Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.","indicators":{"cves":["CVE-2026-106597","CVE-2026-109699","CVE-2026-109692"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:13.740Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-8-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-8-broken-access-control-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-8-broken-access-control-vulnerability-3?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109114","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109114 — A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf…","description":"A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper authenticatio…","indicators":{"cves":["CVE-2026-109114"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:15.550Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/AdithyaYelloju/Restaurant-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/11","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109114","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/955105","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416871","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416871/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109115","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109115 — A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e…","description":"A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User/forgot3.php of the component Password Reset. Performing a manipulation of the argument email/password results in sql in…","indicators":{"cves":["CVE-2026-109115"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:15.730Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/AdithyaYelloju/Restaurant-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/12","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109115","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/955106","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416872","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416872/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109116","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109116 — A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf…","description":"A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be launc…","indicators":{"cves":["CVE-2026-109116"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:15.917Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/AdithyaYelloju/Restaurant-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/AdithyaYelloju/Restaurant-Management-System/issues/13","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109116","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/955125","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416873","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416873/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-13138","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-13138 — Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce In…","description":"Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State.\n\nThis issue affects Biletiva Ticketing Platform: through 2026-07-23.","indicators":{"cves":["CVE-2026-13138"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:17.127Z","fetchedAt":"2026-10-20T03:01:48.432Z","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1309","label":"iletisim@usom.gov.tr","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102073","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102073 — A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P…","description":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Etherne…","indicators":{"cves":["CVE-2026-102073","CVE-2026-102074","CVE-2026-102075","CVE-2026-102076"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:14.157Z","fetchedAt":"2026-10-20T03:01:48.432Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-333035.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-59241","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-59241 — A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All ve…","description":"A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions assigned to a database role.\r\nThis could allow an a…","indicators":{"cves":["CVE-2026-59241"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:16.623Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-550198.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-72895","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-72895 — A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW…","description":"A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is present in the UEFI Secure Boot key database. This coul…","indicators":{"cves":["CVE-2026-72895"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:20.130Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-159454.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78556","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-78556 — A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The a…","description":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoo…","indicators":{"cves":["CVE-2026-78556","CVE-2026-78557"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:20.277Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-968435.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85114","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85114 — A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All version…","description":"A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads.\r\n\r\nThis could allow an attacker who can manipulate the ticket response to w…","indicators":{"cves":["CVE-2026-85114","CVE-2026-85115"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:20.640Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-390352.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89196","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89196 — A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do…","description":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQ…","indicators":{"cves":["CVE-2026-89196","CVE-2026-89197","CVE-2026-89198","CVE-2026-89199","CVE-2026-89200","CVE-2026-89201","CVE-2026-89202","CVE-2026-89203","CVE-2026-89204","CVE-2026-89205","CVE-2026-89206"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:20.920Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-508506.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109832","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109832 — A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O…","description":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled V…","indicators":{"cves":["CVE-2026-109832"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:17:14.033Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109832","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550352","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109403","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109403 — A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerabili…","description":"A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the argument…","indicators":{"cves":["CVE-2026-109403"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:18.770Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109403","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979791","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416945","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416945/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109405","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109405 — A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the f…","description":"A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/conductor/contribs/tasks/kafka/KafkaPublishTask.java. The manipulation of the argument kafka_request.bootStrapServers results…","indicators":{"cves":["CVE-2026-109405"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:19.130Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109405","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979793","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416947","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416947/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109704","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109704 — Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 15…","description":"Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109704"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:20.473Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2037979","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109709","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109709 — Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vul…","description":"Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109709"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:21.020Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2067976","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109712","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109712 — Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed i…","description":"Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:21.330Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068420","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109715","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109715 — Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Fi…","description":"Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109715","CVE-2026-109716"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:21.657Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2073267","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2073269","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109720","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109720 — JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox…","description":"JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109720"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.487Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074160","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109722","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109722 — JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox…","description":"JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109722","CVE-2026-109733"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.693Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074164","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2076269","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109730","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109730 — Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR…","description":"Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109730"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.527Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074896","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109734","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109734 — Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firef…","description":"Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109734"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.947Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1926318","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109736","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109736 — Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 15…","description":"Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109736"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.160Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2029784","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109737","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109737 — Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158,…","description":"Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109737","CVE-2026-109764","CVE-2026-109766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.270Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2044525","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2073382","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074406","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109739","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109739 — Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and…","description":"Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109739"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.480Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2049069","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109743","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109743 — Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 1…","description":"Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109743"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.133Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2059195","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109744","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109744 — Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153…","description":"Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109744"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.253Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2059211","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109746","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109746 — Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Th…","description":"Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109746"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.467Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2063005","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109747","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109747 — Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbir…","description":"Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109747"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.577Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2065402","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109753","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109753 — Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158,…","description":"Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.207Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068441","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109754","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109754 — Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox…","description":"Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109754"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.310Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068443","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109756","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109756 — Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158,…","description":"Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109756"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.530Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2069258","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109757","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109757 — Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Fi…","description":"Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109757"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.630Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2069910","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109759","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109759 — Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firef…","description":"Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109759"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.740Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2070252","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109760","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109760 — Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Fi…","description":"Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109760"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.843Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2070633","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109762","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109762 — Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Fir…","description":"Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109762"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:27.047Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2072438","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109778","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109778 — Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Fi…","description":"Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109778"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.713Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2070547","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65101","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65101 — NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacke…","description":"NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.","indicators":{"cves":["CVE-2026-65101"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:31.400Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65101","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65101","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65103","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65103 — NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename ha…","description":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, res…","indicators":{"cves":["CVE-2026-65103"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:31.553Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65103","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65103","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65104","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65104 — NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could…","description":"NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.","indicators":{"cves":["CVE-2026-65104"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:31.683Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5881","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65104","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65104","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65110","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65110 — NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an…","description":"NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tamperi…","indicators":{"cves":["CVE-2026-65110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:31.820Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5881","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65110","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65110","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65141","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65141 — NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A success…","description":"NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","indicators":{"cves":["CVE-2026-65141"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:32.077Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5902","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65141","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65141","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65147","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65147 — NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds rea…","description":"NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.","indicators":{"cves":["CVE-2026-65147","CVE-2026-65150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:32.207Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5900","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65147","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65147","label":"psirt@nvidia.com","domainType":"other"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65150","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65150","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65148","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65148 — NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A…","description":"NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","indicators":{"cves":["CVE-2026-65148"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:32.333Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5900","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65148","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65148","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65149 — NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds wri…","description":"NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.","indicators":{"cves":["CVE-2026-65149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:32.460Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5900","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65149","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65149","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65161","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65161 — NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote…","description":"NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to information disclosure.","indicators":{"cves":["CVE-2026-65161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:32.710Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65161","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65161","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65164","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65164 — NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction com…","description":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbit…","indicators":{"cves":["CVE-2026-65164"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:33.163Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65164","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65164","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65170","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65170 — NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenti…","description":"NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.","indicators":{"cves":["CVE-2026-65170"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:33.283Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65170","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65170","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65172","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65172 — NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL ma…","description":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy.\n\nA successful exploit may lea…","indicators":{"cves":["CVE-2026-65172"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:33.410Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5889","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65172","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65172","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65180","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65180 — NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE…","description":"NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.","indicators":{"cves":["CVE-2026-65180"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:33.667Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5881","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65180","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65180","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103499","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103499 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.","indicators":{"cves":["CVE-2026-103499","CVE-2026-101294"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:18.873Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292214","label":"psirt@us.ibm.com","domainType":"other"},{"url":"https://www.ibm.com/support/pages/node/7292235","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109519","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109519 — A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function…","description":"A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The ven…","indicators":{"cves":["CVE-2026-109519"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:26.583Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/0xgh0stri13y/CVE-2026-109519/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/0xgh0stri13y/CVE-2026-109519/blob/main/POC/exploit.py","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109519","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983611","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417175","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417175/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109520","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109520 — A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the functi…","description":"A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs…","indicators":{"cves":["CVE-2026-109520"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:26.800Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109520","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984282","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417176","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417176/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109676","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109676 — FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling…","description":"FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle, le…","indicators":{"cves":["CVE-2026-109676"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:30.747Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-369h-7h2p-4685","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-beta1-before-3.32.0-use-after-free-via-smartcard-connect","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109956","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109956 — NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers…","description":"NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the model_filename or model argument can make the weka JVM write files via -d or probe files via -l outsi…","indicators":{"cves":["CVE-2026-109956"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:34.520Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/nltk/nltk/security/advisories/GHSA-j456-xh4h-cpf2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nltk-through-3.10.3-path-traversal-via-wekaclassifier-model-path","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109960","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109960 — Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authent…","description":"Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a malicious theme value via customer_index.php. Script executes when an administrator views the customer overview with the Theme column enable…","indicators":{"cves":["CVE-2026-109960"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:35.207Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-3jpp-mhvh-rv66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/froxlor-2.0.0-before-2.3.14-stored-xss-via-customer-theme-value","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-3jpp-mhvh-rv66","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109961","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109961 — Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated cu…","description":"Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned NSS group database via the unvalidated additional_members parameter of the Ftps.add API. Attackers can embed newline characters that the REBUILD…","indicators":{"cves":["CVE-2026-109961"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:35.407Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-v44g-c58r-37w2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/froxlor-0.10.0-before-2.3.14-newline-injection-via-ftps-add-additional-members","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109965","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109965 — Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to acce…","description":"Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.is_path_in_project() normalizes paths lexically without resolving symlinks, so file tools like read_file and creat…","indicators":{"cves":["CVE-2026-109965"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:36.060Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/oraios/serena","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/oraios/serena/blob/v1.7.0/src/serena/project.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/oraios/serena/commit/6f20f9b822d85bb063008e786f808d04619dd54e","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/oraios/serena/issues/2144","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/oraios/serena/releases/tag/v2.0.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/serena-before-2.0.0-symlink-following-in-file-tools-allows-access-outside-project-root","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/oraios/serena/issues/2144","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109967","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109967 — yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats…","description":"yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the server. Attackers can send a single request with a url value like --version, causing invalid yt-dlp JSON output and an unreco…","indicators":{"cves":["CVE-2026-109967"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:36.390Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/marcopiovanello/yt-dlp-web-ui","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/marcopiovanello/yt-dlp-web-ui/blob/v4.0.0/server/formats/parser.go","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/marcopiovanello/yt-dlp-web-ui/blob/v4.0.0/server/rpc/service.go","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vazzzy071-crypto/security-advisories/blob/main/advisories/2026-10-marcopiovanello-yt-dlp-web-ui-rpc-arg-injection.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/yt-dlp-web-ui-through-4.0.0-null-pointer-dereference-dos-via-service-formats","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74034","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-74034 — Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrol…","description":"Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-controlled file_path. Attackers can inject an upgrade_custom message over the agent channel to read arbitrary files as root, exfiltrating /etc…","indicators":{"cves":["CVE-2026-74034"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:40.087Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-r7hm-43xr-477j","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.1.0-before-4.14.8-arbitrary-file-read-via-upgrade-custom-command","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-r7hm-43xr-477j","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74035","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-74035 — Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where securit…","description":"Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and password policy inside a falsy truthiness check. A delegated user administrator can send an empty password to the user update endpoint, bypassing the r…","indicators":{"cves":["CVE-2026-74035"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:40.253Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-27gv-q7q6-f5qh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.6.0-before-4.14.8-authentication-bypass-via-empty-password-in-update-user","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74036","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-74036 — Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust…","description":"Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration source. Attackers controlling a manager can write unsigned policy files to var/incoming via the upgrade channel and reference them to execute comm…","indicators":{"cves":["CVE-2026-74036"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:40.410Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-qmhg-366r-jjfp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.3.0-before-4.14.8-remote-code-execution-via-sca-command-policies","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-qmhg-366r-jjfp","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74037","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-74037 — Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles,…","description":"Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist. Attackers with revoked administrator grants can continue authenticating and self-link the administrator role to permanently retain privileged access.","indicators":{"cves":["CVE-2026-74037"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:40.570Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-3xm6-wp5v-2fm9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.0.0-before-4.14.8-session-invalidation-bypass-in-check-token","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-3xm6-wp5v-2fm9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74045","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-74045 — Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_l…","description":"Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by OS_MAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a f…","indicators":{"cves":["CVE-2026-74045"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:41.160Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-gc4j-j9fg-4cfr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-3.12.0-before-4.14.8-heap-buffer-overflow-in-wazuh-analysisd-fim-decoder","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-gc4j-j9fg-4cfr","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93907","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-93907 — IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication…","description":"IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.","indicators":{"cves":["CVE-2026-93907"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:45.277Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292216","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95680","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95680 — IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass author…","description":"IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.","indicators":{"cves":["CVE-2026-95680"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:45.437Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292213","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108184","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108184 — Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated use…","description":"Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.","indicators":{"cves":["CVE-2026-108184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:32.033Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26021","label":"security@zoom.us","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108185","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108185 — Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthe…","description":"Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access.","indicators":{"cves":["CVE-2026-108185"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:32.157Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26022","label":"security@zoom.us","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109521","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109521 — A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca25…","description":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initi…","indicators":{"cves":["CVE-2026-109521"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:34.173Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/11","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109521","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984339","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417184","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417184/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109522","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109522 — A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca…","description":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection. Re…","indicators":{"cves":["CVE-2026-109522"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:34.350Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/12","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109522","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984340","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417186","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417186/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109523","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109523 — A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d3…","description":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results in s…","indicators":{"cves":["CVE-2026-109523"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:34.517Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/13","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109523","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984341","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417187","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417187/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/13","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-11731","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-11731 — An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthentic…","description":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality…","indicators":{"cves":["CVE-2026-11731"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:43.510Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/rax30","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11732","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-11732 — An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the…","description":"An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router. This vulnerability could affect the confide…","indicators":{"cves":["CVE-2026-11732"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:43.657Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/cax30/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/rax30/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/rax5/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/raxe300/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53418","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53418 — Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version…","description":"Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.","indicators":{"cves":["CVE-2026-53418"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:44.630Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26019","label":"security@zoom.us","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53420","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53420 — Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user…","description":"Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.","indicators":{"cves":["CVE-2026-53420"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:44.753Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26020","label":"security@zoom.us","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65198","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65198 — Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and pri…","description":"Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build customi…","indicators":{"cves":["CVE-2026-65198"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:46.823Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.runzero.com/advisories/huawei-default-snmpv3-usm-key-cve-2026-65198","label":"44488dab-36db-4358-99f9-bc116477f914","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95114","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95114 — libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/mis…","description":"libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service","indicators":{"cves":["CVE-2026-95114"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:51.153Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://gist.github.com/1820893135-pixel/34d3bc35f74eb0807e73b1df3f15af42","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/commit/736a4a26fce344766bc6618df87bf32193829dd0","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/commit/c404a205a98323a7f60e69fae532c5d26bf4a62a","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/issues/3664","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/issues/3664","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95115","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95115 — Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a den…","description":"Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser","indicators":{"cves":["CVE-2026-95115"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:51.307Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://gist.github.com/1820893135-pixel/d4246b2ecc927193ea1fad50810e9901","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/commit/736a4a26fce344766bc6618df87bf32193829dd0","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/commit/c404a205a98323a7f60e69fae532c5d26bf4a62a","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/issues/3663","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/warmcat/libwebsockets/issues/3663","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95121","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95121 — An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiTyp…","description":"An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction","indicators":{"cves":["CVE-2026-95121"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:51.553Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://gist.github.com/1820893135-pixel/c56b6a1627453e67ca2fb7e29bae95c6","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/issues/98","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/pull/100","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/pull/100/changes/c7f4e1da1b75996a053b05b69be8e738bf77a26c","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/issues/98","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95122","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95122 — mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp…","description":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service","indicators":{"cves":["CVE-2026-95122"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:51.677Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://gist.github.com/1820893135-pixel/607844240f0c965b4dc1f5fdb7ac6148","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/issues/99","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/pull/101","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/pull/101/changes/b5df7f39d741d8926da1ac80fa8c579c30686e7f","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TechSmith/mp4v2/issues/99","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95124","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95124 — Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a d…","description":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()","indicators":{"cves":["CVE-2026-95124"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:51.803Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://gist.github.com/1820893135-pixel/ea24b69099667ea36cef7a72f8c5368a","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/madmurphy/libconfini/issues/20","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/madmurphy/libconfini/pull/21","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/madmurphy/libconfini/pull/21/changes/a87afab391b309692ac30bed8eecbdbcdc5fd96f","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/madmurphy/libconfini/issues/20","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104935","source":"nvd, otx","category":"vulnerability","severity":"high","title":"CVE-2026-104935 — Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated att…","description":"Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.","indicators":{"cves":["CVE-2026-104935"],"ips":["108.165.147.64"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["vpn appliances","ivanti connect secure","root access","race condition","cgi exploitation","privilege escalation","authentication bypass","cve-2026-104935","zero-day vulnerabilities","zeroday","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:11.640Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935","label":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","domainType":"other"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104935","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://otx.alienvault.com/pulse/6acf8533a44062761084826c","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109525","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109525 — A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca…","description":"A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of the file changebookingstatus.php of the component submit2 Handler. Such manipulation of the argument username[]/timestamp[]/status[] leads t…","indicators":{"cves":["CVE-2026-109525"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:18.053Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/15","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109525","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984343","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417189","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417189/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109605","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109605 — A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This af…","description":"A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be c…","indicators":{"cves":["CVE-2026-109605"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:18.853Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://tracexlabs.com/releases/billing-preauth-admin.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-109605","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000551","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417228","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417228/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"},{"url":"https://tracexlabs.com/releases/billing-preauth-admin.html","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110025","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110025 — A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown proce…","description":"A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestricted upload. The attack can be initiated…","indicators":{"cves":["CVE-2026-110025"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:19.800Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/slackero/phpwcms/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/slackero/phpwcms/commit/f4c136b467565b2d16ebe2b8276b9a03547a9a69","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/slackero/phpwcms/releases/tag/v1.12.4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/slackero/phpwcms/security/advisories/GHSA-2c7r-324f-fxm4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110025","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/992814","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417752","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417752/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55376","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55376 — Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure.…","description":"Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/python_tool_executor.py becaus…","indicators":{"cves":["CVE-2026-55376"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:21.720Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/heymrun/heym/commit/b36d795c6ea841b8f1b511a0952e274487ee4ef3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/heymrun/heym/releases/tag/v0.0.40","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/heymrun/heym/security/advisories/GHSA-wcgw-9hfw-f6f2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/heymrun/heym/security/advisories/GHSA-wcgw-9hfw-f6f2","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103030","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103030 — Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follow…","description":"Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original RequestOptions.headers into the redirected HTTP/2 request without comparing the source and destination origins. A server contacted by an appl…","indicators":{"cves":["CVE-2026-103030"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:14.953Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/cfug/dio/commit/9d7ac913340084f3b4987b121e076f28d637a81e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cfug/dio/releases/tag/http2_adapter_v2.8.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cfug/dio/security/advisories/GHSA-cr65-55v9-xhvv","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cfug/dio/security/advisories/GHSA-cr65-55v9-xhvv","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106043","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106043 — A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026…","description":"A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.","indicators":{"cves":["CVE-2026-106043"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:16.387Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs","label":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106047","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106047 — A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before versi…","description":"A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.","indicators":{"cves":["CVE-2026-106047"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:16.497Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs","label":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109606","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109606 — A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the f…","description":"A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote.…","indicators":{"cves":["CVE-2026-109606"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:29.530Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://tracexlabs.com/releases/art-gallery-preauth-admin.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-109606","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000552","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417229","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417229/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109607","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109607 — A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of t…","description":"A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. The e…","indicators":{"cves":["CVE-2026-109607"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:29.700Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://tracexlabs.com/releases/online-exam-sqli-admin.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-109607","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000554","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417230","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417230/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109620","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109620 — A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulner…","description":"A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit…","indicators":{"cves":["CVE-2026-109620"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:30.110Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://tracexlabs.com/releases/online-reviewer-sqli-admin.html","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-109620","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1000556","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417231","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417231/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110097","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110097 — Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers wit…","description":"Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token. Attackers can present the temp token from the jwt/apply endpoint as a bearer JWT, refresh it, or use HTTP Basic login to g…","indicators":{"cves":["CVE-2026-110097"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:33.263Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/ikaros-dev/ikaros/blob/v1.2.5/server/src/main/java/run/ikaros/server/security/SecurityEndpoint.java#L80-L118","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ikaros-dev/ikaros/blob/v1.2.5/server/src/main/java/run/ikaros/server/security/authentication/jwt/JwtAuthenticationFilter.java#L30-L46","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ikaros-dev/ikaros/blob/v1.2.5/server/src/main/java/run/ikaros/server/security/authentication/jwt/JwtAuthenticationProvider.java#L57-L112","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ikaros-dev/ikaros/releases/tag/v1.2.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ikaros-2fa-bypass-temp-token","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ikaros-1.2.0-through-1.2.5-totp-authentication-bypass-via-temp-token","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-110097-ikaros-2fa-bypass-temp-token","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110102","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110102 — Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install sc…","description":"Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity checks when no SHA-256 utility exists. Network-positioned attackers can intercept the github.com mirror request and sub…","indicators":{"cves":["CVE-2026-110102"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:33.987Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/romkatv/powerlevel10k/blob/v1.20.0/gitstatus/install#L306-L333","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/romkatv/powerlevel10k/blob/v1.20.0/gitstatus/install#L348","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/romkatv/powerlevel10k/issues/2970","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/powerlevel10k-through-1.20.0-download-of-code-without-integrity-check-in-gitstatus-installer","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110108","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110108 — MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated…","description":"MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName values…","indicators":{"cves":["CVE-2026-110108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:34.920Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/mateaix/matecloud","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mateaix/matecloud/blob/57b1edc0f0b8b964448e2d41ef7ba98751e71d8d/mate-biz/mate-system/src/main/java/vip/mate/system/admin/trigger/controller/StorageController.java#L45-L118","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mateaix/matecloud/blob/57b1edc0f0b8b964448e2d41ef7ba98751e71d8d/mate-gateway/src/main/resources/application.yml#L80-L85","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/matecloud-storage-admin-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/matecloud-through-5.0.8-missing-authorization-via-api-v1-admin-storage-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110115","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110115 — Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the…","description":"Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters. At…","indicators":{"cves":["CVE-2026-110115"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:35.697Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java#L136-L166","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/digital-infrastructure-filemanager-path-traversal-rw","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/digital-infrastructure-9.6.5-through-9.6.11-path-traversal-via-filemanager-retrievefilestream","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110119","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110119 — Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member add…","description":"Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and delete other members' shipping addresses. Attackers can enumerate sequential address ids via /address/detail/{id}, /address/del and /a…","indicators":{"cves":["CVE-2026-110119"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:36.273Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/guchengwuyue/yshopmall/blob/d1b20a2d76dfd98985410116db3aca8aca193b26/yshop-mall-boot/yshop-app/src/main/java/co/yixiang/modules/user/rest/UserAddressController.java#L117-L153","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/guchengwuyue/yshopmall/blob/d1b20a2d76dfd98985410116db3aca8aca193b26/yshop-mall-boot/yshop-mall/src/main/java/co/yixiang/modules/user/service/impl/YxUserAddressServiceImpl.java#L75-L114","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/yshopmall-member-api-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/yshopmall-through-2.0.0-idor-via-member-address-api-in-useraddresscontroller","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-110119-110120-yshopmall-member-api-ownership-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110123","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110123 — Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows aut…","description":"Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authority checks. Attackers can retrieve unmasked SMTP passwords and…","indicators":{"cves":["CVE-2026-110123"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:36.880Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/makunet/maku-boot/blob/4cd202b037e2ac47e366d4b0691fb387c764d308/maku-boot-system/src/main/java/net/maku/system/controller/SysMailConfigController.java#L53-L59","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/makunet/maku-boot/blob/4cd202b037e2ac47e366d4b0691fb387c764d308/maku-boot-system/src/main/java/net/maku/system/controller/SysMailConfigController.java#L79-L84","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/makunet/maku-boot/blob/4cd202b037e2ac47e366d4b0691fb387c764d308/maku-boot-system/src/main/java/net/maku/system/controller/SysSmsConfigController.java#L53-L59","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/makunet/maku-boot/releases/tag/v5.0.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/maku-boot-mail-sms-config-bfla","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/makunet-maku-boot-4.3.0-through-5.0.0-missing-authorization-via-mail-and-sms-config-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110124","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110124 — FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController…","description":"FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registered attackers can enumerate deviceId or serialNumber values to…","indicators":{"cves":["CVE-2026-110124"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:37.080Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/kerwincui/FastBee/blob/v1.2.1/springboot/wumei-iot/src/main/java/com/ruoyi/iot/controller/DeviceController.java#L118-L213","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/DeviceController.java#L119-L211","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-service/fastbee-iot-service/src/main/java/com/fastbee/iot/service/impl/DeviceServiceImpl.java#L105-L125","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/fastbee-device-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fastbee-through-2.1.0-idor-via-devicecontroller-iot-device-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/fastbee-device-ownership-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110128","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110128 — fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthentic…","description":"fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Access-Token to expose buyer names, nationa…","indicators":{"cves":["CVE-2026-110128"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:38.647Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/fushengqian/fuint/blob/4c4bc8a68e0a93d37c37ab374f72d64728c9e5f8/fuint-application/src/main/java/com/fuint/common/config/WebConfig.java#L80-L101","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/fushengqian/fuint/blob/4c4bc8a68e0a93d37c37ab374f72d64728c9e5f8/fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientOrderController.java#L77-L80","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/fuint-order-detail-unauthenticated-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fuint-through-commit-4c4bc8a-missing-authentication-via-clientapi-order-detail","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-54640","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-54640 — OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAsse…","description":"OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in agent/src/main/java/org/openremote/agent/protocol/knx/KNXProtocol.java processes 0.xml from an authenticated user's uploaded ETS project ZIP with Saxon TransformerFactoryImpl and XML…","indicators":{"cves":["CVE-2026-54640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:41.490Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/openremote/core/commit/c28d3c60ebc2da68d9b6c4a6d7a5ad875a255ee9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/openremote/core/releases/tag/1.24.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/openremote/core/security/advisories/GHSA-7v6w-c3f4-9wpq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-54641","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-54641 — OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRol…","description":"OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in manager/src/main/java/org/openremote/manager/security/UserResourceImpl.java authorize callers with the read:admin role without confirming that the target UUID belo…","indicators":{"cves":["CVE-2026-54641"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:41.633Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/openremote/core/commit/de89b8d3af272d717bf297934c2cbc97243f08b7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/openremote/core/releases/tag/1.24.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/openremote/core/security/advisories/GHSA-xqr9-4wvv-gvch","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/openremote/core/security/advisories/GHSA-xqr9-4wvv-gvch","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-61642","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-61642 — Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of…","description":"Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding. HTTP header parsing (`src/HttpHeader.cc`) accepted the bare` Transfer-Encoding:` identity…","indicators":{"cves":["CVE-2026-61642"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:42.670Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/squid-cache/squid/commit/d06f48de8b8cc9a378cb91ecfe8e89b6e81696d2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/squid-cache/squid/commit/d808a7c825a70275113790471135c9c4d547ee51","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/squid-cache/squid/pull/2427","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/squid-cache/squid/pull/2431","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/squid-cache/squid/releases/tag/SQUID_7_6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-537g-4gfh-w7m6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-82416","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-82416 — FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retai…","description":"FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVE_PHP_SESSION at compile time. In this build configuration, frankenphp_reset_…","indicators":{"cves":["CVE-2026-82416"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:47.183Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/php/frankenphp/commit/be24d82531675f90862b8cde1e9fc7e9ee855aa5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/php/frankenphp/pull/2523","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/php/frankenphp/releases/tag/caddy/v1.12.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/php/frankenphp/security/advisories/GHSA-v3ph-cgqh-r8p5","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85990","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85990 — Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped…","description":"Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public API service methods, while PermissionEnforcer::enforce allows…","indicators":{"cves":["CVE-2026-85990"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:47.707Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/Leantime/leantime/commit/5605e5ee86bbd01acb85c6b5d8fb337faf8bcf02","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/commit/7ebf7a9517e2aaa05ec15b8130ab1841a4bde43e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/pull/3583","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/pull/3797","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/releases/tag/v3.10.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/security/advisories/GHSA-54mm-6729-r5wp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/security/advisories/GHSA-54mm-6729-r5wp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/security/advisories/GHSA-54mm-6729-r5wp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/security/advisories/GHSA-54mm-6729-r5wp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Leantime/leantime/security/advisories/GHSA-54mm-6729-r5wp","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-46773","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2025-46773 — An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit…","description":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud…","indicators":{"cves":["CVE-2025-46773","CVE-2025-57739","CVE-2026-23705","CVE-2026-23706","CVE-2026-23707","CVE-2026-101997"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:11.940Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-246","label":"psirt@fortinet.com","domainType":"primary"},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-184","label":"psirt@fortinet.com","domainType":"primary"},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-178","label":"psirt@fortinet.com","domainType":"primary"},{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104085","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104085 — odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows aut…","description":"odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in…","indicators":{"cves":["CVE-2026-104085"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:12.727Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://plugins.spip.net/odt2spip.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/odt2spip-os-command-injection-via-document-filename","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/blog/spip-odt2spip-authenticated-command-injection-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108375","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108375 — dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Re…","description":"dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default inserts schema-controlled string, UUID, bytes, and fixed field defaults int…","indicators":{"cves":["CVE-2026-108375","CVE-2026-108376","CVE-2026-108377","CVE-2026-108378","CVE-2026-108379","CVE-2026-108380","CVE-2026-108381","CVE-2026-108382","CVE-2026-108383","CVE-2026-108384","CVE-2026-108385"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:16.390Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/marcosschroh/dataclasses-avroschema/commit/01e6d5e15ab0ff69faac39a340d21b85da1e852f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/commit/429f3d705d2d04c0c65e2ef832daed5ff91318fc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-jcjg-gjg5-xp7v","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-110113-publiccms-trade-address-save-cross-user-overwrite","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/commit/919d3e07c8938369cfc2c0569007ba373247e74a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-57hr-pcm8-p9j9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-ff3j-hw44-6vx4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-h9q3-f96w-f88j","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/pull/843","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-g7p7-mgvm-jw7p","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/pull/358","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-4jmx-9m83-vxx8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-vrq9-94ww-jv3c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-4xxf-mv22-hcr8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-8j5c-xq6f-2c43","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-gw6w-pvv9-2fqc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100200","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100200 — Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally…","description":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-100200","CVE-2026-70056"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:39.840Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100200","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70056","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100201","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100201 — Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevat…","description":"Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-100201"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:39.983Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100201","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100203","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100203 — Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil…","description":"Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-100203","CVE-2026-70139"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:40.327Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100203","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70139","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100205","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100205 — Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges lo…","description":"Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-100205","CVE-2026-105729"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:40.540Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100205","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105729","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100207","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100207 — Improper neutralization of special elements used in an os command ('os command injection') in Azure…","description":"Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-100207"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:40.677Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100207","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100209","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100209 — Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a netw…","description":"Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100209","CVE-2026-100211","CVE-2026-100212","CVE-2026-97010","CVE-2026-97017","CVE-2026-97738","CVE-2026-97745","CVE-2026-97747","CVE-2026-97752","CVE-2026-97759","CVE-2026-97771","CVE-2026-97775","CVE-2026-108446"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:40.810Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100209","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100211","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100212","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97010","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97017","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97738","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97745","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97747","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97752","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97759","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97771","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97775","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108446","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100210","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100210 — Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code…","description":"Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100210","CVE-2026-77902","CVE-2026-88145","CVE-2026-97003","CVE-2026-97004","CVE-2026-97007","CVE-2026-97009","CVE-2026-97741","CVE-2026-97748","CVE-2026-97751","CVE-2026-97753","CVE-2026-97754","CVE-2026-97756","CVE-2026-97757","CVE-2026-97758","CVE-2026-97763","CVE-2026-97765","CVE-2026-97766","CVE-2026-97768","CVE-2026-97769","CVE-2026-97773","CVE-2026-97776","CVE-2026-97777","CVE-2026-97780"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:40.933Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100210","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77902","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88145","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97003","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97004","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97007","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97009","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97741","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97748","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97751","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97753","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97754","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97756","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97757","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97758","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97763","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97765","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97766","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97768","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97769","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97773","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97776","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97777","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97780","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100214","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100214 — Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to exec…","description":"Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100214"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:41.343Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100214","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100215","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100215 — Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut…","description":"Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-100215"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:41.470Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100215","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100216","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100216 — Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges l…","description":"Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-100216"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:41.650Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100216","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100217","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100217 — Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privi…","description":"Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-100217"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:41.807Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100217","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100218","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100218 — Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove…","description":"Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100218","CVE-2026-70187"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:41.983Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100218","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70187","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100220","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100220 — Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute…","description":"Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-100220"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:42.320Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100220","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100225","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100225 — Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo…","description":"Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-100225","CVE-2026-102189","CVE-2026-102191","CVE-2026-83911"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:42.780Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100225","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102189","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102191","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83911","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102192","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102192 — Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker t…","description":"Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-102192"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:43.800Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102192","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102193","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102193 — Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil…","description":"Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102193","CVE-2026-102195","CVE-2026-102196","CVE-2026-102197","CVE-2026-103554","CVE-2026-103565","CVE-2026-105722","CVE-2026-108461","CVE-2026-88103","CVE-2026-88105","CVE-2026-88113","CVE-2026-96919","CVE-2026-97806","CVE-2026-97807","CVE-2026-97808","CVE-2026-97809"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:43.930Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102193","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102195","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102196","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102197","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103554","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103565","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105722","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108461","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88103","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88105","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88113","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96919","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97806","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97807","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97808","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97809","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102194","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102194 — Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall…","description":"Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102194","CVE-2026-88073"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:44.073Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102194","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88073","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102201","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102201 — Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privil…","description":"Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102201"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:45.047Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102201","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102202","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102202 — Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth…","description":"Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102202","CVE-2026-97792"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:45.193Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102202","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97792","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102203","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102203 — Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized…","description":"Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102203"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:45.333Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102203","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102204","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102204 — Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint al…","description":"Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102204"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:45.533Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102204","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102205","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102205 — Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth…","description":"Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102205","CVE-2026-102215","CVE-2026-102218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:45.660Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102205","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102215","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102218","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102207","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102207 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102207","CVE-2026-103568","CVE-2026-69736","CVE-2026-69830","CVE-2026-69931","CVE-2026-70097","CVE-2026-70169","CVE-2026-71347","CVE-2026-81971","CVE-2026-83775","CVE-2026-83841","CVE-2026-83879","CVE-2026-85333","CVE-2026-85357","CVE-2026-85904","CVE-2026-85912","CVE-2026-85941","CVE-2026-88096","CVE-2026-88146","CVE-2026-88174","CVE-2026-96215","CVE-2026-96932","CVE-2026-97787"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:46.027Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102207","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103568","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69736","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69830","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69931","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70097","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70169","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71347","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81971","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83775","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83841","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83879","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85333","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85357","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85904","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85912","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85941","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88096","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88146","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88174","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96215","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96932","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97787","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102208","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102208 — Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges…","description":"Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102208","CVE-2026-70067","CVE-2026-70076","CVE-2026-70144","CVE-2026-70176","CVE-2026-70209","CVE-2026-70236","CVE-2026-70249","CVE-2026-70253","CVE-2026-70271","CVE-2026-70273","CVE-2026-83756","CVE-2026-83761","CVE-2026-83901","CVE-2026-85802","CVE-2026-85804","CVE-2026-96249"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:46.230Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102208","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70067","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70076","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70144","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70176","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70209","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70236","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70249","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70253","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70271","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70273","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83756","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83761","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83901","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85802","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85804","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96249","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102209","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102209 — Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate…","description":"Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102209"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:46.390Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102209","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102211","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102211 — Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker…","description":"Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102211"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:46.673Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102211","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102214","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102214 — Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.","description":"Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-102214"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:46.843Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102214","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102216","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102216 — Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows…","description":"Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102216"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:47.207Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102216","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102217","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102217 — Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privilege…","description":"Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102217"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:47.397Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102217","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102220","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102220 — Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-102220"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:47.763Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102220","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102225","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102225 — Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a ne…","description":"Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102225"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:48.117Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102225","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102226","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102226 — Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business…","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102226","CVE-2026-105727"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:48.300Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102226","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105727","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102227","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102227 — Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to…","description":"Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-102227","CVE-2026-70048"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:48.417Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102227","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70048","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102231","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102231 — Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to byp…","description":"Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-102231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:48.690Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102231","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102232","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102232 — Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security f…","description":"Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-102232"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:48.807Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102232","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102233","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102233 — Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security fea…","description":"Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-102233"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:48.920Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102233","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102599","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102599 — Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6…","description":"Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious clie…","indicators":{"cves":["CVE-2026-102599"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:49.037Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/socketio/socket.io/commit/86db1fc3db2cd315a065d64c4e48918ccf9b4729","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.10","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/socketio/socket.io/security/advisories/GHSA-2gc4-cqfq-p2gv","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102849","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102849 — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute cod…","description":"Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102849","CVE-2026-102850","CVE-2026-105591","CVE-2026-105592","CVE-2026-105593","CVE-2026-105596","CVE-2026-105597","CVE-2026-105598","CVE-2026-105714","CVE-2026-105716","CVE-2026-105717"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:49.170Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102849","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102850","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105591","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105592","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105593","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105596","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105597","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105598","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105714","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105716","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105717","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102856","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102856 — Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code…","description":"Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102856","CVE-2026-102857","CVE-2026-102855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:49.973Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102856","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102857","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102855","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102858","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102858 — Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute co…","description":"Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:50.217Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102858","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102859","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102859 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of…","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-102859","CVE-2026-102864","CVE-2026-88204","CVE-2026-88208","CVE-2026-88209","CVE-2026-97783"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:50.340Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102859","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102864","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88204","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88208","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88209","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97783","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102860","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102860 — Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate priv…","description":"Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102860"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:50.470Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102860","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102861","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102861 — Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil…","description":"Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102861","CVE-2026-88198","CVE-2026-88164"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:50.590Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102861","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88198","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88164","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102862","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102862 — Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate priv…","description":"Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102862","CVE-2026-105720","CVE-2026-70246"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:50.717Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102862","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105720","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70246","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102863","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102863 — Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an a…","description":"Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102863"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:50.837Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102863","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102866","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102866 — Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthoriz…","description":"Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102866"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:51.207Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102866","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102869","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102869 — Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an un…","description":"Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-102869"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:51.483Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102870","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102870 — Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized att…","description":"Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102870"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:51.617Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103553","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103553 — Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate p…","description":"Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-103553"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:51.737Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103553","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103555","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103555 — Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker…","description":"Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-103555","CVE-2026-109453"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:52.037Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103555","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109453","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103558","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103558 — Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny…","description":"Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-103558"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:52.210Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103558","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103569","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103569 — Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information…","description":"Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-103569"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:53.123Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103569","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103572","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103572 — Improper control of generation of code ('code injection') in Visual Studio Tools for Applications an…","description":"Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-103572"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:53.293Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103575","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103575 — Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo…","description":"Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-103575","CVE-2026-108458","CVE-2026-69976","CVE-2026-69984","CVE-2026-69986","CVE-2026-69987","CVE-2026-69988","CVE-2026-69991","CVE-2026-69994","CVE-2026-69995","CVE-2026-69996","CVE-2026-69997","CVE-2026-69998","CVE-2026-70004","CVE-2026-70006","CVE-2026-70012","CVE-2026-97789"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:53.413Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103575","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108458","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69976","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69984","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69986","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69987","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69988","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69991","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69994","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69995","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69996","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69997","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69998","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70004","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70006","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70012","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97789","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103577","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103577 — Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass…","description":"Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-103577"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:53.723Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103577","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103578","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103578 — Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege…","description":"Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-103578","CVE-2026-70111"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:53.870Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103578","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70111","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103966","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103966 — Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbi…","description":"Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103966","CVE-2026-104340","CVE-2026-104344"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:54.537Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://www.adobe.com/trust/security/products/framemaker/apsb26-172.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103967","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103967 — Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary…","description":"Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103967","CVE-2026-104341","CVE-2026-106625"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:54.663Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://www.adobe.com/trust/security/products/framemaker/apsb26-172.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104342","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104342 — Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code e…","description":"Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-104342"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:55.047Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://www.adobe.com/trust/security/products/framemaker/apsb26-172.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104875","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104875 — Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.…","description":"Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval using a client-supplied userID and updated an emergency recovery session using only its client-supplied recovery-session…","indicators":{"cves":["CVE-2026-104875"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:55.863Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/ente/ente/commit/1fc4956f90277076559c16dedbfad10cb4d1227b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ente/ente/commit/b3fa9f566466ac3660e276a67621130d684957e7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ente/ente/pull/11311","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ente/ente/pull/11342","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ente/ente/security/advisories/GHSA-2hxj-953x-c2vw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105003","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105003 — Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l…","description":"Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-105003","CVE-2026-97804"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:56.157Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105003","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97804","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105004","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105004 — Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc…","description":"Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-105004","CVE-2026-69952"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:56.343Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105004","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69952","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105005","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105005 — Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a netwo…","description":"Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-105005"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:56.567Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105005","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105007","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105007 — An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS)…","description":"An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.\nTo exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to el…","indicators":{"cves":["CVE-2026-105007"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:56.893Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105007","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105009","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105009 — Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elev…","description":"Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-105009"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:57.277Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105009","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105013","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105013 — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex…","description":"Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-105013","CVE-2026-85900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:57.610Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105013","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85900","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105595","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105595 — Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a…","description":"Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-105595"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:58.437Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105595","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105599","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105599 — Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute…","description":"Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-105599","CVE-2026-88207"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:58.960Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105599","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88207","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105715","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105715 — Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute c…","description":"Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-105715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:59.360Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105715","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105718","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105718 — Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a…","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-105718","CVE-2026-70254","CVE-2026-97755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:59.750Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105718","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70254","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97755","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105723","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105723 — Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attack…","description":"Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-105723"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:00.303Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105723","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105725","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105725 — Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-105725"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:00.507Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105725","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105728","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105728 — Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose inf…","description":"Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-105728"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:00.900Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105728","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105732","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105732 — Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges loca…","description":"Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-105732"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:01.300Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105732","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105733","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105733 — Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.","description":"Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-105733"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:01.443Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105733","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108130","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108130 — Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz…","description":"Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108130"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:03.207Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108130","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108131","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108131 — No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacke…","description":"No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-108131"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:03.343Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108131","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108132","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108132 — Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.","description":"Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108132"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:03.530Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108132","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108133","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108133 — Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authoriz…","description":"Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108133"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:03.690Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108133","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108134","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108134 — Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108134"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:03.830Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108134","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108135","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108135 — Improper link resolution before file access ('link following') in Windows Backup Engine allows an au…","description":"Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108135","CVE-2026-62687"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:03.960Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108135","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62687","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108136","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108136 — Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil…","description":"Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108136","CVE-2026-70086","CVE-2026-70115","CVE-2026-70136","CVE-2026-70150","CVE-2026-70156","CVE-2026-83564","CVE-2026-83570","CVE-2026-83574","CVE-2026-83575","CVE-2026-88182","CVE-2026-96324","CVE-2026-96937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:04.100Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108136","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70086","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70115","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70136","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70150","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70156","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83564","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83570","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83574","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83575","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88182","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96324","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96937","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108396","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108396 — Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows a…","description":"Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108396","CVE-2026-83697"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:04.800Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108396","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83697","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108398","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108398 — Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature l…","description":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-108398"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:04.963Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108399","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108399 — Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo…","description":"Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108399"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:05.103Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108399","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108400","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108400 — Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker t…","description":"Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-108400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:05.300Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108400","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108457","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108457 — Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a…","description":"Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-108457"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:05.437Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108457","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108460","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108460 — Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net…","description":"Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-108460"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:05.767Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108460","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108463","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108463 — Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to by…","description":"Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-108463"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:06.310Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108463","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108464","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108464 — Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privil…","description":"Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108464"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:06.443Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108464","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108465","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108465 — Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate priv…","description":"Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108465"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:06.620Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108465","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108467","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108467 — Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to e…","description":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-108467"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:06.987Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108467","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108468","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108468 — Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108468","CVE-2026-70272","CVE-2026-83702","CVE-2026-83717","CVE-2026-83718","CVE-2026-83752","CVE-2026-85361","CVE-2026-85364","CVE-2026-87693","CVE-2026-87694","CVE-2026-87700","CVE-2026-87704","CVE-2026-87708","CVE-2026-87715","CVE-2026-88080","CVE-2026-88124","CVE-2026-96302","CVE-2026-96305","CVE-2026-96307","CVE-2026-96308"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:07.180Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108468","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70272","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83702","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83717","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83718","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83752","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85361","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85364","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87693","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87694","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87700","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87704","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87708","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87715","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88080","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88124","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96302","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96305","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96307","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96308","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108471","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108471 — Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an autho…","description":"Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-108471"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:07.377Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108471","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109428","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109428 — Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attacke…","description":"Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the _extract_commands() function of bash.p…","indicators":{"cves":["CVE-2026-109428"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:33.097Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mistralai/mistral-vibe/pull/1111","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/mistral-vibe-permission-bypass-via-bash-line-continuation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109429","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109429 — Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attac…","description":"Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as embeddin…","indicators":{"cves":["CVE-2026-109429"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:33.250Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/mistralai/mistral-vibe/commit/19b5b74faa78d0816b8d4d4c7d7543fc3520678c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mistralai/mistral-vibe/pull/1084","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/mistral-vibe-bash-permission-bypass-via-var-p-prompt-transform","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110111","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110111 — Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authent…","description":"Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a crafted…","indicators":{"cves":["CVE-2026-110111"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:43.107Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/vatesfr/xen-orchestra/security/advisories/GHSA-mc4m-hc98-rhmv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/xen-orchestra-before-6.9.0-privilege-escalation-via-prototype-pollution-in-vm-importfromesxi","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110112","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110112 — Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another…","description":"Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the m…","indicators":{"cves":["CVE-2026-110112"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:43.257Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-h4vc-h76x-c279","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/dockhand-before-1.0.50-oidc-privilege-escalation-via-missing-token-claim-validation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110202","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110202 — Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() tha…","description":"Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by prefixing them with a bare >& redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo w…","indicators":{"cves":["CVE-2026-110202"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:43.543Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group14-redirect.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/RooCodeInc/Roo-Code/blob/v3.54.0/src/core/auto-approval/commands.ts#L265-L274","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/roo-code-through-3.54.0-auto-approve-bypass-via-redirect-operator-stripping","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group14-redirect.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110203","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110203 — Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to au…","description":"Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandLine(). Attackers can use indirect prompt injection with escaped or single-quoted double quotes to hide command separator…","indicators":{"cves":["CVE-2026-110203"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:43.707Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-quote-boundary.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/RooCodeInc/Roo-Code/blob/v3.54.0/src/shared/parse-command.ts#L111-L115","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/roo-code-through-3.54.0-auto-approve-bypass-via-quote-masking-desynchronization","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110204","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110204 — Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to ru…","description":"Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted…","indicators":{"cves":["CVE-2026-110204"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:43.857Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group03-funsub.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/RooCodeInc/Roo-Code/blob/v3.54.0/src/shared/parse-command.ts#L74-L79","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/roo-code-through-3.54.0-auto-approve-bypass-via-funsub-command-substitution","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group03-funsub.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110205","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110205 — Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that…","description":"Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob characters. Attackers using indirect prompt injection can craft commands like echo *$(...) that match allowlisted prefixes, executing denied c…","indicators":{"cves":["CVE-2026-110205","CVE-2026-110206"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:44.003Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-glob-token.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/RooCodeInc/Roo-Code/blob/v3.54.0/src/shared/parse-command.ts#L148-L172","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/roo-code-through-3.54.0-auto-approve-bypass-via-glob-token-discarding-command-substitution","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/7rah/oss-cve/blob/6adb836d24ca446fd168c3acdc4c170beb77fe0f/roocode-group16-output-as-command.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/RooCodeInc/Roo-Code/blob/v3.54.0/src/shared/parse-command.ts#L100-L172","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/roo-code-through-3.54.0-auto-approve-bypass-via-command-substitution-at-command-position","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110207","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110207 — Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authent…","description":"Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because no administrator check exists. Attackers can send POST requests to /managerUser/updateUser to reset the admin account's…","indicators":{"cves":["CVE-2026-110207"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:44.337Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/config/SecurityConfig.java#L66-L84","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/controller/ManagerUserController.java#L45-L72","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/service/impl/ManageUserServiceImpl.java#L181-L237","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/service/impl/ManagerRoleServiceImpl.java#L224-L243","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/wukong-aicrm-api-wide-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wukong-aicrm-through-20260610-missing-authorization-in-user-and-role-management-apis","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110208","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110208 — Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig co…","description":"Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API key. Attackers can request GET /systemConfig/byType/ai for the cleartext key, or send a chosen apiUrl to /systemConfig/ai…","indicators":{"cves":["CVE-2026-110208"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:44.590Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/controller/SystemConfigController.java#L53-L77","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/service/impl/SystemConfigServiceImpl.java#L143-L155","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/service/impl/SystemConfigServiceImpl.java#L260-L294","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WuKongOpenSource/Wukong-AICRM/blob/20260610/backend/src/main/java/com/kakarote/ai_crm/service/impl/SystemConfigServiceImpl.java#L607-L619","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/wukong-aicrm-api-wide-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wukong-aicrm-through-20260610-missing-authorization-in-system-configuration-apis-exposes-stored-ai-provider-keys","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110211","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110211 — iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authe…","description":"iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/{namespace}/{slug}. Attackers can locate targets through the anonymous search endpoint and trigger deletion withou…","indicators":{"cves":["CVE-2026-110211"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:45.037Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/iflytek/skillhub","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/iflytek/skillhub/blob/v0.2.22/server/skillhub-app/src/main/java/com/iflytek/skillhub/controller/cli/CliSkillController.java#L88-L96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/iflytek/skillhub/blob/v0.2.22/server/skillhub-app/src/main/java/com/iflytek/skillhub/service/SkillDeleteAppService.java#L95-L127","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/iflytek/skillhub/blob/v0.2.22/server/skillhub-app/src/main/java/com/iflytek/skillhub/service/cli/CliSkillAppService.java#L149-L161","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/skillhub-cli-skill-delete-missing-ownership-check","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/skillhub-through-0.2.22-missing-authorization-in-cli-skill-delete-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110215","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110215 — youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated…","description":"youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button permissions to roles via PUT /api/v1/roles/{roleId}/menus. Low-privileged users such as the GUEST test account can grant all permissions to their own role, re…","indicators":{"cves":["CVE-2026-110215"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:45.640Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/youlaitech/youlai-boot/blob/v2.21.1/src/main/java/com/youlai/boot/system/controller/RoleController.java#L111-L119","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/youlaitech/youlai-boot/blob/v2.21.1/src/main/java/com/youlai/boot/system/service/impl/RoleServiceImpl.java#L222-L243","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/youlaitech/youlai-boot/commit/36d2db6dc559817bd4e02b1f33b1998891850497","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/youlai-boot-role-menu-assignment-and-user-status-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/youlai-boot-through-2.21.1-missing-authorization-in-role-menu-assignment-allows-privilege-escalation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110216","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110216 — youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authentica…","description":"youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUserStatus handler lacks a @PreAuthorize check. Attackers can send PATCH requests to /api/v1/users/{userId}/status to disable root or admin acc…","indicators":{"cves":["CVE-2026-110216"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:45.790Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/youlaitech/youlai-boot/blob/v2.21.1/src/main/java/com/youlai/boot/system/controller/UserController.java#L114-L126","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/youlaitech/youlai-boot/commit/86a9b3e212ff5a5537b0c7050c7802aea7fe486f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/youlai-boot-role-menu-assignment-and-user-status-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/youlai-boot-through-2.21.1-missing-authorization-in-user-status-update-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110220","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110220 — Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that all…","description":"Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server, ca…","indicators":{"cves":["CVE-2026-110220"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:46.413Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/kubeflow/hub","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kubeflow/hub/blob/v0.3.17/cmd/controller/main.go#L224-L228","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kubeflow/hub/blob/v0.3.17/pkg/inferenceservice-controller/controller.go#L268-L292","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kubeflow/hub/blob/v0.3.17/pkg/openapi/client.go#L420-L423","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/kubeflow-hub-controller-token-url-forwarding","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/kubeflow-model-registry-through-0.3.17-ssrf-via-inferenceservice-controller-url-annotation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110233","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110233 — Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers…","description":"Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened t…","indicators":{"cves":["CVE-2026-110233"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:48.327Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/NSPC911/rovr/blob/888a1efecd9eb92a773bb21451244c0edcf1a3f1/src/rovr/functions/path.py#L115-L158","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/NSPC911/rovr/blob/888a1efecd9eb92a773bb21451244c0edcf1a3f1/src/rovr/functions/path.py#L642-L701","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/NSPC911/rovr/releases/tag/v0.10.3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HyCwXmsjfe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://pypi.org/project/rovr/0.10.3/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rovr-through-0.10.3-os-command-injection-via-unquoted-path-to-cmd-exe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HyCwXmsjfe","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110236","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110236 — KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attac…","description":"KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the {path} placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting in…","indicators":{"cves":["CVE-2026-110236"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:48.770Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/KDE/dolphin/blob/v26.08.2/src/dolphinmainwindow.cpp#L3195-L3225","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HJCMaGsizg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/kde-dolphin-24.08.0-through-26.08.2-os-command-injection-via-crafted-folder-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110237","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110237 — Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory with…","description":"Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands that e…","indicators":{"cves":["CVE-2026-110237"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:48.917Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/vifm/vifm/blob/v0.14.4/src/ipc.c#L394-L443","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vifm/vifm/blob/v0.14.4/src/ipc.c#L866-L874","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vifm/vifm/releases/tag/v0.14.4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SkX7Pmiofg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/vifm-0.8.1-beta-through-0.14.4-unverified-ipc-fifo-ownership-allows-cross-user-command-execution","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110238","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110238 — Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows auth…","description":"Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attackers can dispatch editUser or deleteUser w…","indicators":{"cves":["CVE-2026-110238"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.063Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/zofe/rapyd-admin","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/blob/v9.19.0/app/Modules/Companies/Livewire/UsersModalEditEmbed.php#L27-L81","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/blob/v9.19.0/app/Modules/Companies/Views/users_table_embed.blade.php#L17-L20","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/commit/acd6ee85f9e5ccec67199673b039c605d161406a","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/releases/tag/v9.20.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/rapyd-admin-9.0.0-before-9.20.0-authorization-bypass-via-usersmodaleditembed-component","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110255","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110255 — Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerabili…","description":"Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or cloud m…","indicators":{"cves":["CVE-2026-110255"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.843Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-f2mx-74xq-g4p9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/dockhand-before-1.0.43-ssrf-via-api-templates-compose-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-f2mx-74xq-g4p9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-49785","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-49785 — Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a secu…","description":"Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-49785"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:52.167Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49785","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-58280","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-58280 — Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.","description":"Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-58280"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:52.810Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58280","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-61931","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-61931 — Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate pri…","description":"Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-61931"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:53.153Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61931","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-68836","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-68836 — Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileg…","description":"Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-68836"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:53.820Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68836","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69326","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69326 — Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n…","description":"Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69326"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:54.000Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69326","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69354","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69354 — Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi…","description":"Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69354","CVE-2026-69363","CVE-2026-70103","CVE-2026-85800"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:54.177Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69354","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69363","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70103","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85800","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69370","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69370 — Improper neutralization of special elements used in a command ('command injection') in Visual Studio…","description":"Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:54.530Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69370","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69387","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69387 — Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall…","description":"Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69387","CVE-2026-83689","CVE-2026-85354"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:54.710Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69387","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83689","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85354","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69452","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69452 — Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privile…","description":"Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-69452"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:55.033Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69452","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69454","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69454 — Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allo…","description":"Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-69454","CVE-2026-69577"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:55.213Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69454","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69577","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69471","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69471 — Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges…","description":"Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69471","CVE-2026-69635","CVE-2026-83680","CVE-2026-83779","CVE-2026-85358","CVE-2026-85366"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:55.337Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69471","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69635","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83680","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83779","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85358","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85366","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69521","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69521 — Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over…","description":"Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69521"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:55.697Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69521","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69596","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69596 — Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e…","description":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69596","CVE-2026-69743","CVE-2026-72934","CVE-2026-72968","CVE-2026-72969"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:56.003Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69596","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69743","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72934","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72968","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72969","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69633","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69633 — Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges loc…","description":"Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69633"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:56.173Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69633","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69650","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69650 — Improper verification of cryptographic signature in Windows Key Distribution Center allows an author…","description":"Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69650"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:57.213Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69650","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69651","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69651 — Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a ne…","description":"Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-69651","CVE-2026-84008","CVE-2026-96958"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:57.397Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69651","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96958","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69673","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69673 — Improper link resolution before file access ('link following') in Windows Update allows an authorize…","description":"Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69673"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:57.557Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69673","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69718","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69718 — Improper neutralization of special elements used in a command ('command injection') in Windows Updat…","description":"Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69718"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:57.997Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69718","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69733","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69733 — Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.","description":"Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69733","CVE-2026-69882"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:58.307Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69733","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69882","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69763","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69763 — Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69763","CVE-2026-69766","CVE-2026-69856","CVE-2026-69935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:58.747Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69763","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69766","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69856","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69935","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69765","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69765 — Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code o…","description":"Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69765"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:58.897Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69765","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69783","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69783 — External control of file name or path in Windows Update allows an authorized attacker to elevate pri…","description":"External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69783"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:59.167Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69783","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69789","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69789 — Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at…","description":"Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":["CVE-2026-69789"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:59.293Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69789","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69795","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69795 — Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privil…","description":"Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:59.467Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69795","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69798","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69798 — Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileg…","description":"Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:59.620Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69798","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69802","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69802 — Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to e…","description":"Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69802"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:59.803Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69802","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69840","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69840 — Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:00.093Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69840","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69850","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69850 — Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi…","description":"Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:00.257Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69850","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69867","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69867 — Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.","description":"Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69867"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:00.587Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69867","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69880","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69880 — Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an au…","description":"Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69880","CVE-2026-69926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:00.873Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69880","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69926","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69884","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69884 — Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.","description":"Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69884"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:01.327Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69884","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69898","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69898 — Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc…","description":"Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69898","CVE-2026-70106","CVE-2026-70114","CVE-2026-70121","CVE-2026-83736","CVE-2026-83768","CVE-2026-83833","CVE-2026-83882","CVE-2026-96312","CVE-2026-96868","CVE-2026-96913","CVE-2026-96929","CVE-2026-97803"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:01.683Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69898","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70106","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70114","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70121","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83736","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83768","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83833","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83882","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96312","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96868","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96913","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96929","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97803","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69909","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69909 — Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate pri…","description":"Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:02.160Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69909","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69913","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69913 — Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.","description":"Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69913"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:02.343Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69913","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69915","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69915 — Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69915","CVE-2026-83706","CVE-2026-83859"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:02.713Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69915","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83706","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83859","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69916","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69916 — Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l…","description":"Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69916"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:02.873Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69916","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69918","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69918 — Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil…","description":"Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69918"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:03.057Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69918","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69923","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69923 — Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges l…","description":"Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69923"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:03.463Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69923","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69934","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69934 — Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate pri…","description":"Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:03.890Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69934","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69942","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69942 — Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.","description":"Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-69942"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:04.347Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69942","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69943","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69943 — Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office S…","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69943","CVE-2026-70298","CVE-2026-85932","CVE-2026-108452"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:04.473Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69943","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70298","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85932","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108452","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69945","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69945 — Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate…","description":"Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69945"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:04.593Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69945","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69949","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69949 — Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privil…","description":"Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69949"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:04.867Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69949","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69950","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69950 — Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local…","description":"Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69950","CVE-2026-69953","CVE-2026-83727"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:05.137Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69950","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69953","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83727","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69957","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69957 — Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr…","description":"Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:06.083Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69957","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69959","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69959 — Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.","description":"Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-69959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:06.443Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69959","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69963","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69963 — Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p…","description":"Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69963","CVE-2026-69970"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:06.623Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69963","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69970","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69964","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69964 — Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo…","description":"Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69964"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:06.803Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69964","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69966","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69966 — Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to eleva…","description":"Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69966"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:06.983Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69966","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69969","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69969 — Improper link resolution before file access ('link following') in Windows AppX Deployment Service al…","description":"Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69969","CVE-2026-85849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:07.500Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69969","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85849","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69977","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69977 — Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attack…","description":"Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-69977"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:08.420Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69977","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69982","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69982 — Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker…","description":"Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-69982","CVE-2026-70005","CVE-2026-83511","CVE-2026-83674"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:08.890Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69982","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70005","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83511","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83674","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69992","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-69992 — Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov…","description":"Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-69992"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:10.087Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69992","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70007","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70007 — Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network…","description":"Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70007"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:11.757Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70008","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70008 — Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to eleva…","description":"Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:11.903Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70008","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70010","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70010 — Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local…","description":"Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70010","CVE-2026-83652","CVE-2026-96217","CVE-2026-96916"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:12.043Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70010","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83652","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96217","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96916","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70014","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70014 — Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over…","description":"Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70014"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:12.717Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70014","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70015","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70015 — Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized at…","description":"Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70015"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:12.900Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70015","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70021","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70021 — Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc…","description":"Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70021","CVE-2026-70151","CVE-2026-83912","CVE-2026-83922","CVE-2026-85906"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:13.210Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70021","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70151","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83912","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83922","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85906","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70023","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70023 — Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70023","CVE-2026-96223"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:13.337Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70023","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96223","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70026","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70026 — Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges loc…","description":"Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70026"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:13.850Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70026","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70027","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70027 — Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate p…","description":"Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70027"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:14.010Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70027","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70031","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70031 — Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n…","description":"Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70031"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:14.150Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70031","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70033","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70033 — Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unaut…","description":"Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70033"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:14.343Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70033","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70035","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70035 — Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code…","description":"Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70035"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:14.490Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70045","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70045 — Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70045"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:15.203Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70045","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70049","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70049 — Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Co…","description":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":["CVE-2026-70049","CVE-2026-88075"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:15.657Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70051","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70051 — Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an autho…","description":"Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70051"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:15.780Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70051","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70052","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70052 — Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code l…","description":"Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-70052"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:15.937Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70052","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70054","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70054 — Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges lo…","description":"Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70054"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:16.070Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70054","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70058","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70058 — Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a ne…","description":"Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70058"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:16.767Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70058","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70059","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70059 — Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall…","description":"Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70059","CVE-2026-70138"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:16.910Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70059","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70138","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70060","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70060 — Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat…","description":"Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70060","CVE-2026-70108","CVE-2026-70117","CVE-2026-70285"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:17.090Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70060","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70108","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70117","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70285","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70062","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70062 — Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.","description":"Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70062"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:17.270Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70062","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70064","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70064 — Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate…","description":"Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70064"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:17.600Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70064","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70066","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70066 — Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70066"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:17.800Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70066","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70068","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70068 — Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attac…","description":"Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70068"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:18.137Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70068","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70069","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70069 — Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code ove…","description":"Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70069"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:18.323Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70069","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70079","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70079 — Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny s…","description":"Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70079"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:19.510Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70079","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70082","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70082 — Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.","description":"Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70082"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:19.657Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70082","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70089","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70089 — Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a net…","description":"Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70089"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:20.530Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70089","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70093","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70093 — Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevat…","description":"Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70093"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:21.060Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70093","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70102","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70102 — Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70102"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:21.750Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70102","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70104","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70104 — Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to ele…","description":"Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70104"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:22.070Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70104","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70110","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70110 — Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker t…","description":"Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:22.750Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70110","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70112","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70112 — Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code lo…","description":"Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-70112"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:23.140Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70112","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70113","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70113 — Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate pr…","description":"Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70113"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:23.287Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70113","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70118","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70118 — Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70118","CVE-2026-70140","CVE-2026-70230","CVE-2026-83644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:24.003Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70118","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70140","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70230","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83644","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70123","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70123 — Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate pr…","description":"Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70123"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:24.550Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70123","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70126","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70126 — Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code…","description":"Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":["CVE-2026-70126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:24.743Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70126","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70127","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70127 — Use after free in DNS Server allows an unauthorized attacker to execute code over a network.","description":"Use after free in DNS Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70127"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:24.917Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70127","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70132","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70132 — Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attack…","description":"Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70132"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:25.390Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70132","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70133","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70133 — Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized at…","description":"Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70133"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:25.577Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70133","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70134","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70134 — Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70134","CVE-2026-83707"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:25.850Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70134","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83707","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70142","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70142 — Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges…","description":"Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70142"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:27.247Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70142","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70143","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70143 — Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute c…","description":"Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-70143"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:27.380Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70143","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70149 — Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs…","description":"Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70149","CVE-2026-96948"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:28.033Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70149","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96948","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70155","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70155 — Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to…","description":"Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:28.713Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70155","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70159","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70159 — Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker…","description":"Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70159","CVE-2026-70181","CVE-2026-96236","CVE-2026-109468"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:29.390Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70159","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70181","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96236","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109468","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70160","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70160 — Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70160","CVE-2026-70243","CVE-2026-83675","CVE-2026-83690","CVE-2026-83796","CVE-2026-83913","CVE-2026-83924","CVE-2026-85372","CVE-2026-85836","CVE-2026-85945","CVE-2026-88134","CVE-2026-88139","CVE-2026-88141","CVE-2026-96216","CVE-2026-96317"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:29.510Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70160","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70243","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83675","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83690","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83796","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83913","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83924","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85372","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85836","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85945","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88134","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88139","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88141","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96216","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96317","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70161","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70161 — Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an aut…","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:29.683Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70163","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70163 — Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized a…","description":"Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70163"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:29.930Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70163","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70164","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70164 — Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70164","CVE-2026-83682","CVE-2026-96852"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:30.087Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70164","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83682","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96852","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70165","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70165 — Improper link resolution before file access ('link following') in .NET allows an authorized attacker…","description":"Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70165","CVE-2026-70190","CVE-2026-96225","CVE-2026-96231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:30.270Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70165","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70190","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70167","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70167 — Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized att…","description":"Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70167"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:30.537Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70167","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70168","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70168 — Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele…","description":"Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70168","CVE-2026-70237","CVE-2026-83738"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:30.657Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70168","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70237","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83738","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70172","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70172 — Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo…","description":"Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70172","CVE-2026-96931"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:31.180Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70172","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96931","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70174","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70174 — Improperly implemented security check for standard in .NET allows an unauthorized attacker to execut…","description":"Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70174"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:31.533Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70174","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70175","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70175 — Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a…","description":"Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70175"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:31.687Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70175","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70177","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70177 — Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elev…","description":"Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70177"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:31.987Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70177","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70179","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70179 — Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privilege…","description":"Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70179"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:32.170Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70183","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70183 — Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.N…","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70183"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:32.417Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70184","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70184 — Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to el…","description":"Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:32.540Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70184","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70185","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70185 — Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a securit…","description":"Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-70185"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:32.670Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70185","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70186","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70186 — Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.","description":"Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70186"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:32.847Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70186","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70197","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70197 — Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.","description":"Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70197","CVE-2026-96224","CVE-2026-96235"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:33.790Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96224","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96235","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70198","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70198 — Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc…","description":"Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70198"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:33.910Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70198","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70202","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70202 — Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to e…","description":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70202","CVE-2026-70251","CVE-2026-88206"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:34.370Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70202","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70251","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88206","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70205","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70205 — Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f…","description":"Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70205","CVE-2026-70225","CVE-2026-70245"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:34.487Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70205","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70225","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70245","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70207","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70207 — Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute c…","description":"Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70207"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:34.793Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70207","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70210","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70210 — Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges o…","description":"Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70210"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:35.327Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70210","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70212","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70212 — Improper restriction of communication channel to intended endpoints in Windows Security Center allow…","description":"Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70212"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:35.697Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70212","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70213","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70213 — Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a…","description":"Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70213"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:35.860Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70213","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70218","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70218 — Insufficient granularity of access control in Windows StateRepository API allows an authorized attac…","description":"Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:36.660Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70218","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70220","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70220 — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code…","description":"Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-70220","CVE-2026-70268","CVE-2026-70269","CVE-2026-70287","CVE-2026-70301","CVE-2026-70302","CVE-2026-88185","CVE-2026-88186","CVE-2026-88202","CVE-2026-96996","CVE-2026-97001","CVE-2026-108426","CVE-2026-108427","CVE-2026-108428","CVE-2026-108429","CVE-2026-108430","CVE-2026-108432","CVE-2026-108437","CVE-2026-108439","CVE-2026-108441","CVE-2026-108447","CVE-2026-108449","CVE-2026-108450"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:36.897Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70220","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70268","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70269","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70287","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70301","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70302","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88185","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88186","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88202","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96996","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97001","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108426","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108427","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108428","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108429","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108430","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108432","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108437","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108439","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108441","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108447","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108449","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108450","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70222","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70222 — Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally…","description":"Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70222","CVE-2026-83873"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:37.083Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70222","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83873","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70223","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70223 — Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally…","description":"Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70223"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:38.300Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70223","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70228","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70228 — Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc…","description":"Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70228"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:39.050Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70228","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70229","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70229 — Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execu…","description":"Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:39.210Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70229","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70233","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70233 — Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to…","description":"Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70233","CVE-2026-85870"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:39.757Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70233","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85870","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70238","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70238 — Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele…","description":"Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70238","CVE-2026-87706","CVE-2026-88143"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:40.617Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70238","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87706","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88143","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70241","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70241 — Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70241","CVE-2026-83720"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:40.800Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70241","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83720","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70247","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70247 — Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.","description":"Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-70247"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:41.797Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70247","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70250","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70250 — Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjace…","description":"Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":["CVE-2026-70250"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:42.457Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70250","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70252","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70252 — Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate p…","description":"Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:43.030Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70252","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70255","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70255 — Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil…","description":"Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70255","CVE-2026-88093"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:43.860Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70255","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88093","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70262","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70262 — Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a ne…","description":"Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70262"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:44.897Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70262","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70266","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70266 — Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Of…","description":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-70266"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:45.300Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70266","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70267","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70267 — Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an au…","description":"Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70267"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:45.420Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70267","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70274","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70274 — Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc…","description":"Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70274","CVE-2026-83852","CVE-2026-83900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:46.567Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70274","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83852","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83900","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70275","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70275 — Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute co…","description":"Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70275"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:46.693Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70275","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70276","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70276 — Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges…","description":"Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70276","CVE-2026-85340","CVE-2026-88109"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:46.873Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70276","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85340","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88109","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70278","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70278 — Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to el…","description":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70278"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:47.180Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70278","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70281","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70281 — Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose informati…","description":"Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-70281"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:47.630Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70281","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70286","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70286 — Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile…","description":"Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70286","CVE-2026-85901","CVE-2026-85908"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:48.323Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70286","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85901","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85908","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70297","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70297 — Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to ex…","description":"Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70297"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:49.643Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70297","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70299","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70299 — Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privi…","description":"Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70299"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:49.883Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70299","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70303","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70303 — Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.","description":"Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70303"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:50.360Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70303","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70343","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70343 — Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to ex…","description":"Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:50.533Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70566","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70566 — Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges loc…","description":"Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70566"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:50.653Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70566","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70571","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70571 — Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute…","description":"Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70571"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:50.830Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70571","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70580","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70580 — Missing authentication for critical function in Windows Credential Guard allows an authorized attack…","description":"Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.","indicators":{"cves":["CVE-2026-70580"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:51.270Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70580","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-72955","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-72955 — Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate p…","description":"Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-72955"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:51.747Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72955","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73027","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73027 — External control of system or configuration setting in Windows Setup Files Cleanup allows an authori…","description":"External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-73027"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:52.197Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73027","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77910","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77910 — Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privil…","description":"Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-77910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:54.057Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77910","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78459","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-78459 — Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to…","description":"Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-78459"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:54.187Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78459","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-81969","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-81969 — Insufficient granularity of access control in Windows Server Update Service allows an authorized att…","description":"Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-81969","CVE-2026-83499"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:54.677Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81969","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83499","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83505","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83505 — Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize…","description":"Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83505","CVE-2026-83510"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:55.430Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83505","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83510","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83506","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83506 — Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges…","description":"Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83506"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:55.593Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83506","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83507","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83507 — Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic…","description":"Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83507","CVE-2026-83793","CVE-2026-83933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:55.773Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83507","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83793","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83933","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83508","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83508 — Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.","description":"Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83508","CVE-2026-83567","CVE-2026-96928"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:55.910Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83508","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83567","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96928","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83509","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83509 — Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privil…","description":"Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83509"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:56.097Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83509","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83513","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83513 — Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac…","description":"Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83513","CVE-2026-83857","CVE-2026-85820","CVE-2026-85825","CVE-2026-96946","CVE-2026-96947","CVE-2026-96949","CVE-2026-96950"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:56.640Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83513","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83857","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85820","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85825","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96946","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96947","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96949","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96950","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83514","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83514 — Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to e…","description":"Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83514"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:56.930Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83514","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83516","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83516 — Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthori…","description":"Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83516"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:57.300Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83516","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83518","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83518 — Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locall…","description":"Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83518"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:57.633Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83518","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83520","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83520 — Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a net…","description":"Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83520","CVE-2026-87697"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:57.933Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83522","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83522 — Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized…","description":"Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-83522"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:58.267Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83522","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83523","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83523 — Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute c…","description":"Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83523"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:58.450Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83523","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83566","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83566 — Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally…","description":"Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83566"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:58.930Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83566","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83568","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83568 — Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate priv…","description":"Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83568","CVE-2026-83837"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:59.230Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83568","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83837","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83569","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83569 — Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges…","description":"Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83569"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:59.357Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83569","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83579","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83579 — Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges…","description":"Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83579"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:00.683Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83579","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83580","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83580 — Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacke…","description":"Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83580","CVE-2026-83698"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:00.910Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83580","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83698","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83583","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83583 — Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges…","description":"Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83583"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:02.367Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83583","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83584","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83584 — Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83584"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:02.530Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83584","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83585","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83585 — Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate…","description":"Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83585"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:02.710Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83585","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83586","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83586 — Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authoriz…","description":"Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83586"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:02.897Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83586","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83587","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83587 — Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate pri…","description":"Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83587"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:03.033Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83587","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83588","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83588 — Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges…","description":"Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83588","CVE-2026-83638"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:03.210Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83588","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83638","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83634","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83634 — Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.","description":"Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83634"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:03.400Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83634","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83635","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83635 — Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.","description":"Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83635"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:03.557Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83635","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83637","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83637 — Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privilege…","description":"Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83637"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:03.900Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83637","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83639","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83639 — Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate p…","description":"Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83639"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:04.293Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83639","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83640","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83640 — Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.","description":"Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-83640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:04.503Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83640","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83641","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83641 — Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges loca…","description":"Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83641","CVE-2026-83650"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:04.700Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83641","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83650","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83642","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83642 — Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized a…","description":"Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83642"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:04.920Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83642","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83643","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83643 — Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute co…","description":"Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83643"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:05.150Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83643","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83645","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83645 — Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)…","description":"Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83645","CVE-2026-85319","CVE-2026-85321"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:05.500Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83645","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85319","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85321","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83647","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83647 — Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny servi…","description":"Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83647"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:05.780Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83647","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83654","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83654 — Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut…","description":"Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83654","CVE-2026-83656"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:06.790Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83654","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83656","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83655","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83655 — Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service ov…","description":"Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83655"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:06.973Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83655","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83659","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83659 — Improper link resolution before file access ('link following') in Windows User Profile Service allow…","description":"Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:07.660Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83659","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83665","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83665 — Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over…","description":"Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83665"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:08.023Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83665","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83666","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83666 — Concurrent execution using shared resource with improper synchronization ('race condition') in Activ…","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83666"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:08.177Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83666","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83669","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83669 — Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate pr…","description":"Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83669"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:08.700Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83669","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83670","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83670 — Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disc…","description":"Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-83670"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:08.860Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83670","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83676","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83676 — Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate…","description":"Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83676"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:09.653Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83676","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83677","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83677 — Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized att…","description":"Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83677"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:09.793Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83677","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83678","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83678 — Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc…","description":"Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83678","CVE-2026-85368","CVE-2026-85834"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:09.920Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83678","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85368","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85834","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83679","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83679 — Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privile…","description":"Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:10.103Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83679","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83687","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83687 — Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to…","description":"Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83687"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:11.297Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83687","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83688","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83688 — Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code…","description":"Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83688"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:11.453Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83688","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83691","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83691 — Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege…","description":"Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83691"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:12.047Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83691","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83692","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83692 — Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr…","description":"Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83692","CVE-2026-88168"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:12.240Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83692","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88168","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83694","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83694 — Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to eleva…","description":"Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83694","CVE-2026-85356"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:12.597Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83694","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85356","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83696","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83696 — Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr…","description":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83696","CVE-2026-88106","CVE-2026-88107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:12.987Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83696","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88106","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88107","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83699","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83699 — Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attack…","description":"Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83699"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:13.480Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83699","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83700","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83700 — Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privi…","description":"Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83700","CVE-2026-83701"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:13.660Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83700","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83701","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83704","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83704 — Improper link resolution before file access ('link following') in Microsoft Windows Search Component…","description":"Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83704","CVE-2026-88191","CVE-2026-96911"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:14.363Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83704","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88191","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96911","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83708","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83708 — Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges…","description":"Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83708","CVE-2026-83767","CVE-2026-87711"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:15.010Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83708","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83767","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87711","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83709","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83709 — Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges local…","description":"Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83709"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:15.200Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83709","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83710","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83710 — Use after free in Windows Device Association Service allows an authorized attacker to elevate privil…","description":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83710","CVE-2026-85332","CVE-2026-85342","CVE-2026-85352"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:15.377Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83710","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85332","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85342","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85352","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83712","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83712 — Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.","description":"Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-83712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:15.543Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83712","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83715","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83715 — Missing authentication for critical function in Windows Error Reporting allows an authorized attacke…","description":"Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-83715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:16.060Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83715","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83716","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83716 — Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.","description":"Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-83716","CVE-2026-83931"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:16.243Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83716","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83931","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83721","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83721 — Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83721","CVE-2026-83732","CVE-2026-83762","CVE-2026-83866","CVE-2026-83883"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:17.027Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83721","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83732","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83762","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83866","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83883","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83722","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83722 — Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker t…","description":"Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83722"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:17.173Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83722","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83724","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83724 — Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el…","description":"Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83724","CVE-2026-83783","CVE-2026-96856"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:17.630Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83724","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83783","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96856","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83725","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83725 — Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to…","description":"Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83725"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:17.807Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83725","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83726","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83726 — Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local…","description":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83726","CVE-2026-85854","CVE-2026-85855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:17.983Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83726","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85854","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85855","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83728","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83728 — Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attack…","description":"Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.","indicators":{"cves":["CVE-2026-83728"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:18.330Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83728","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83735","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83735 — Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate p…","description":"Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83735","CVE-2026-85850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:18.857Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83735","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85850","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83739","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83739 — Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an…","description":"Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.","indicators":{"cves":["CVE-2026-83739"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:19.533Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83739","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83740","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83740 — Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83740","CVE-2026-83790","CVE-2026-83853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:19.793Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83740","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83790","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83853","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83741","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83741 — Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.","description":"Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83741"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:19.983Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83741","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83746","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83746 — Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to el…","description":"Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-83746"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:20.157Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83746","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83749","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83749 — Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally…","description":"Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83749"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:20.693Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83749","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83750","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83750 — Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized at…","description":"Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83750"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:20.893Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83750","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83751","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83751 — Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83751"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:21.103Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83751","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83753","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83753 — Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to e…","description":"Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:21.443Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83753","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83754","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83754 — Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov…","description":"Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83754","CVE-2026-88157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:21.597Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83754","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88157","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83757","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83757 — Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc…","description":"Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83757"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:22.063Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83757","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83758","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83758 — Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code…","description":"Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-83758"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:22.200Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83758","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83759","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83759 — Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) al…","description":"Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83759"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:22.380Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83759","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83763","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83763 — Access of resource using incompatible type ('type confusion') in Windows Input System allows an auth…","description":"Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83763"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:23.017Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83763","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83769","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83769 — Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.","description":"Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83769"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:25.280Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83769","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83771","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83771 — Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate pri…","description":"Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":["CVE-2026-83771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:25.610Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83771","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83777","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83777 — Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate p…","description":"Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":["CVE-2026-83777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:26.400Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83777","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83778","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83778 — Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to ex…","description":"Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83778"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:26.563Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83778","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83781","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83781 — Improper null termination in Windows Program Compatibility Assistant Service allows an authorized at…","description":"Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83781"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:27.050Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83781","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83784","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83784 — Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to ele…","description":"Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-83784"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:27.570Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83784","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83785","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83785 — Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privile…","description":"Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83785"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:27.863Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83785","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83789","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83789 — Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileg…","description":"Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-83789"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:28.570Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83789","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83791","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83791 — Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges…","description":"Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83791"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:28.870Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83791","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83792","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83792 — Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate p…","description":"Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83792"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:29.013Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83792","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83795","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83795 — Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service…","description":"Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:29.477Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83795","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83826","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83826 — Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate pr…","description":"Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83826"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:30.130Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83826","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83827","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83827 — Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate…","description":"Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83827"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:30.260Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83827","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83828","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83828 — Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p…","description":"Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:30.423Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83828","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83829","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83829 — Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el…","description":"Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83829","CVE-2026-83850","CVE-2026-83920","CVE-2026-83921","CVE-2026-85869"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:30.547Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83829","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83850","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83920","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83921","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85869","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83830","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83830 — Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to ele…","description":"Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83830"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:30.720Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83830","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83832","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83832 — Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca…","description":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83832","CVE-2026-96862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:30.900Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83832","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96862","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83834","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83834 — Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83834"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:31.227Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83834","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83836","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83836 — Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code…","description":"Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-83836","CVE-2026-83874"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:31.580Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83836","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83874","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83838","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83838 — Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacke…","description":"Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":["CVE-2026-83838"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:31.923Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83838","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83839","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83839 — Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker t…","description":"Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:32.090Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83839","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83840","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83840 — Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges l…","description":"Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:32.243Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83840","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83842","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83842 — Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","description":"Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83842"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:32.560Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83842","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83843","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83843 — Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker t…","description":"Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:32.713Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83843","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83844","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83844 — Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.","description":"Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:32.890Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83845","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83845 — Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to per…","description":"Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.","indicators":{"cves":["CVE-2026-83845"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:33.013Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83845","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83846","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83846 — Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to eleva…","description":"Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:33.147Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83846","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83847","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83847 — Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges…","description":"Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83847"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:33.300Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83847","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83848","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83848 — Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to…","description":"Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83848","CVE-2026-96933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:33.480Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83848","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96933","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83851","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83851 — Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to…","description":"Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-83851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:33.960Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83851","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83855","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83855 — Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to de…","description":"Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:34.513Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83855","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83856","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83856 — Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code…","description":"Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83856"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:34.643Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83856","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83860","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83860 — Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a ne…","description":"Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83860"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:35.157Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83860","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83861","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83861 — Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva…","description":"Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83861"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:35.330Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83861","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83863","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83863 — Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi…","description":"Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83863","CVE-2026-85318","CVE-2026-85365"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:35.670Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83863","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85318","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85365","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83867","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83867 — Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr…","description":"Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83867"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:36.353Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83867","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83868","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83868 — Concurrent execution using shared resource with improper synchronization ('race condition') in Micro…","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83868","CVE-2026-85329","CVE-2026-88160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:36.517Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83868","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85329","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88160","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83871","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83871 — Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege…","description":"Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83871"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:36.990Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83871","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83872","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83872 — Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevat…","description":"Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83872"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:37.157Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83872","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83876","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83876 — Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83876"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:38.083Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83876","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83877","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83877 — Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privil…","description":"Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83877"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:38.310Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83877","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83881","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83881 — Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri…","description":"Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83881","CVE-2026-85822"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:38.643Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83881","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85822","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83886","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83886 — Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privi…","description":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83886","CVE-2026-83930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:39.427Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83886","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83930","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83889","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83889 — Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code…","description":"Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83889"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:39.917Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83889","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83891","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83891 — Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code…","description":"Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83891","CVE-2026-108431","CVE-2026-108440","CVE-2026-108445"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:40.100Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83891","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108431","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108440","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108445","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83896","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83896 — Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr…","description":"Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83896","CVE-2026-83902","CVE-2026-83903","CVE-2026-85902"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:41.173Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83896","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83902","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83903","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85902","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83899","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83899 — Improper privilege management in Windows Installer allows an authorized attacker to elevate privileg…","description":"Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83899"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:43.363Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83899","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83908","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83908 — Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate priv…","description":"Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83908"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:45.700Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83908","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83914","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83914 — Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.","description":"Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:46.750Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83914","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83915","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83915 — Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privile…","description":"Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83915"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:46.927Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83915","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83916","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83916 — Double free in Windows Error Reporting allows an authorized attacker to execute code locally.","description":"Double free in Windows Error Reporting allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-83916"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:47.080Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83916","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83917","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83917 — Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83917"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:47.253Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83917","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83918","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83918 — Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges…","description":"Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83918"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:47.417Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83918","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83919","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83919 — Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to exec…","description":"Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-83919"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:47.593Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83919","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83923","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83923 — Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over…","description":"Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83923"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:48.297Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83923","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83927","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83927 — Improper link resolution before file access ('link following') in Windows Registry allows an authori…","description":"Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83927"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:49.087Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83927","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83929","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83929 — Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.","description":"Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83929"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:49.403Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83929","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83932","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83932 — Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileg…","description":"Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-83932"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:49.833Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83932","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83934","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83934 — Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a n…","description":"Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-83934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:50.150Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83934","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84012","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84012 — Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a…","description":"Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-84012"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:51.213Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84012","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84013","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84013 — Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local…","description":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-84013","CVE-2026-85810"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:51.363Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84013","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85810","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84014","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84014 — Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el…","description":"Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-84014"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:51.550Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84014","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84016","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84016 — Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges l…","description":"Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-84016"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:51.903Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84016","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84017","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84017 — Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized…","description":"Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-84017"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:52.077Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84017","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84018","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84018 — Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileg…","description":"Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-84018","CVE-2026-85933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:52.257Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84018","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85933","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84019","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84019 — Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate p…","description":"Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-84019"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:52.437Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84019","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84020","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84020 — Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to…","description":"Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-84020"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:52.593Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84020","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85322","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85322 — Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthor…","description":"Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-85322"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:53.530Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85322","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85324","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85324 — Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows a…","description":"Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-85324"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:53.850Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85324","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85327","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85327 — Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev…","description":"Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85327"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:54.010Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85327","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85328","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85328 — Weak authentication in Windows Projected File System allows an authorized attacker to elevate privil…","description":"Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85328"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:54.223Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85328","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85334","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85334 — Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to discl…","description":"Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-85334"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:56.053Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85334","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85338","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85338 — Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileg…","description":"Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85338"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:56.590Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85338","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85341","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85341 — Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate priv…","description":"Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85341"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:57.057Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85341","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85343","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85343 — Improper link resolution before file access ('link following') in Windows Hyper-V allows an authoriz…","description":"Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:57.407Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85343","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85353","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85353 — Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i…","description":"Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-85353","CVE-2026-85847"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:57.760Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85353","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85847","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85355","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85355 — Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver al…","description":"Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85355"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:58.117Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85355","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85359","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85359 — Improper control of generation of code ('code injection') in Windows Performance Monitor allows an a…","description":"Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85359"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:58.930Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85359","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85362","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85362 — Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized a…","description":"Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85362"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:59.293Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85362","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85363","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85363 — Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileg…","description":"Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-85363"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:59.480Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85367","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85367 — Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate pri…","description":"Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85367"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:00.170Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85367","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85369","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85369 — Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","description":"Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85369"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:00.523Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85369","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85370","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85370 — Use after free in WebDAV allows an authorized attacker to elevate privileges locally.","description":"Use after free in WebDAV allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:00.667Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85370","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85371","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85371 — Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a…","description":"Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85371","CVE-2026-85799","CVE-2026-85811"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:00.843Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85371","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85799","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85811","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85373","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85373 — Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize…","description":"Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85373","CVE-2026-85927"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:01.203Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85373","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85927","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85375","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85375 — Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t…","description":"Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85375","CVE-2026-85918"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:01.563Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85375","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85918","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85376","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85376 — Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri…","description":"Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85376"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:01.743Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85376","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85377","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85377 — Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an aut…","description":"Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85377"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:01.923Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85377","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85791","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85791 — Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to…","description":"Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85791"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:02.390Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85791","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85795","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85795 — Use after free in Windows Text Services Framework allows an authorized attacker to elevate privilege…","description":"Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:03.087Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85795","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85796","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85796 — Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo…","description":"Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85796"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:03.267Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85796","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85798","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85798 — Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to…","description":"Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85798","CVE-2026-85931","CVE-2026-96938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:03.630Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85798","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85931","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96938","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85803","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85803 — Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privi…","description":"Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85803"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:04.333Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85803","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85807","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85807 — Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate…","description":"Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85807"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:04.950Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85807","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85808","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85808 — Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack…","description":"Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-85808","CVE-2026-96245"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:05.110Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85808","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96245","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85817","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85817 — Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized att…","description":"Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85817"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:06.487Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85817","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85823","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85823 — Use after free in Windows Composite Image File System allows an authorized attacker to elevate privi…","description":"Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85823","CVE-2026-85824"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:07.330Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85823","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85824","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85826","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85826 — Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges l…","description":"Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85826"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:07.777Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85826","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85827","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85827 — Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.","description":"Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85827","CVE-2026-85828","CVE-2026-96843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:07.957Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85827","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85828","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96843","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85829","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85829 — Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges…","description":"Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:08.310Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85829","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85832","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85832 — Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an autho…","description":"Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85832","CVE-2026-85848"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:08.827Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85832","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85848","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85833","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85833 — Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr…","description":"Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:09.117Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85833","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85837","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85837 — Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.","description":"Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85837"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:09.747Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85837","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85842","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85842 — Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacke…","description":"Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85842"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:10.197Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85842","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85843","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85843 — Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an au…","description":"Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:10.337Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85843","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85846","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85846 — Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:10.523Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85846","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85851","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85851 — Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:11.327Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85851","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85853","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85853 — Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l…","description":"Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85853","CVE-2026-88177","CVE-2026-88179","CVE-2026-88180","CVE-2026-88181","CVE-2026-88188","CVE-2026-88189","CVE-2026-88194"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:11.623Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85853","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88177","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88179","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88180","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88181","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88188","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88189","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88194","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85856","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85856 — Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacke…","description":"Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.","indicators":{"cves":["CVE-2026-85856"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:12.050Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85856","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85858","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85858 — Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privil…","description":"Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:12.410Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85858","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85860","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85860 — Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate pri…","description":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85860"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:12.713Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85860","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85861","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85861 — Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges…","description":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85861","CVE-2026-85863"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:12.897Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85861","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85863","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85864","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85864 — Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","description":"Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85864"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:13.220Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85864","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85867","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85867 — Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker…","description":"Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85867"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:13.720Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85867","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85868","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85868 — Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri…","description":"Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85868"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:13.890Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85868","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85871","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85871 — Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate p…","description":"Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85871"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:14.433Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85871","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85872","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85872 — Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc…","description":"Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85872"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:14.610Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85872","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85874","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85874 — Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute cod…","description":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-85874"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:14.900Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85874","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85879","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85879 — Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorize…","description":"Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85879"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:15.073Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85879","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85881","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85881 — Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate…","description":"Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-85881"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:15.190Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85881","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85884","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85884 — Missing authentication for critical function in Windows Health and Optimized Experiences Service all…","description":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85884","CVE-2026-96183"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:15.313Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85884","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96183","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85891","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85891 — Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized…","description":"Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-85891"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:15.430Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85891","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85903","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85903 — Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n…","description":"Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85903","CVE-2026-88112","CVE-2026-88114","CVE-2026-88116"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:16.043Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85903","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88112","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88114","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88116","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85905","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85905 — Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p…","description":"Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85905"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:16.403Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85905","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85911","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85911 — Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85911"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:17.200Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85911","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85914","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85914 — Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges…","description":"Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:17.517Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85914","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85915","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85915 — Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil…","description":"Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85915","CVE-2026-96917"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:17.677Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85915","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96917","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85920","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85920 — Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker…","description":"Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85920"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:18.133Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85920","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85922","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85922 — Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature…","description":"Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-85922"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:18.310Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85925","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85925 — Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an aut…","description":"Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-85925"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:18.433Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85925","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85926","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85926 — Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to…","description":"Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:18.553Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85926","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85930","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85930 — Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges loca…","description":"Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:19.107Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85930","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85934","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85934 — Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privilege…","description":"Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:19.907Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85934","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85936","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85936 — Double free in Windows Shell allows an unauthorized attacker to execute code over a network.","description":"Double free in Windows Shell allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:20.353Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85936","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85943","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85943 — Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) al…","description":"Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85943"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:21.050Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85943","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87691","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87691 — Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87691"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:21.553Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87691","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87692","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87692 — Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elev…","description":"Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87692"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:21.683Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87692","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87695","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87695 — Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an auth…","description":"Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:22.153Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87695","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87696","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87696 — Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized a…","description":"Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-87696"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:22.273Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87696","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87699","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87699 — Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.","description":"Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87699"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:22.693Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87699","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87702","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87702 — Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to…","description":"Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87702"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:23.047Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87702","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87705","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87705 — Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized…","description":"Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.","indicators":{"cves":["CVE-2026-87705"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:23.403Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87705","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87707","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87707 — Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate…","description":"Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87707"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:23.760Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87707","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87710","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87710 — Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized a…","description":"Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87710"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:24.293Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87710","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87712","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87712 — Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to…","description":"Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-87712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:24.680Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87712","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87713","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87713 — Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privilege…","description":"Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":["CVE-2026-87713"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:24.867Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87713","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87716","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87716 — Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to d…","description":"Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-87716"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:25.387Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87716","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88070","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88070 — Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.","description":"Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88070"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:25.540Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88070","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88071","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88071 — Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","description":"Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88071"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:25.717Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88071","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88072","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88072 — Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate pr…","description":"Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88072"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:25.863Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88072","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88074","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88074 — Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an auth…","description":"Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88074","CVE-2026-96914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:26.150Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88074","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96914","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88076","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88076 — Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges lo…","description":"Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88076"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:26.390Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88076","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88079","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88079 — Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate pri…","description":"Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88079"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:26.567Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88079","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88091","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88091 — Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacke…","description":"Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88091"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:26.863Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88091","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88094","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88094 — Improper neutralization of special elements in output used by a downstream component ('injection') i…","description":"Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-88094"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:27.320Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88094","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88098","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88098 — Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized at…","description":"Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88098"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:27.620Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88098","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88099","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88099 — Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over…","description":"Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-88099","CVE-2026-96945"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:27.800Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88099","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96945","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88100","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88100 — Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privile…","description":"Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88100"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:27.920Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88100","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88101","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88101 — Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate…","description":"Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88101"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:28.040Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88101","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88110","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88110 — Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privi…","description":"Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:29.060Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88110","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88115","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88115 — Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a…","description":"Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88115"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:29.767Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88115","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88118","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88118 — Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an a…","description":"Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88118"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:30.250Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88118","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88121","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88121 — Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized atta…","description":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88121","CVE-2026-88142","CVE-2026-88159","CVE-2026-88173"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:30.730Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88121","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88142","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88159","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88173","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88126","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88126 — Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.","description":"Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88126","CVE-2026-96847"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:31.543Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88126","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96847","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88127","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88127 — Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88127"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:31.720Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88127","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88128","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88128 — Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv…","description":"Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88128"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:31.880Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88128","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88133","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88133 — Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker t…","description":"Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88133"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:32.493Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88133","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88135","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88135 — Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.","description":"Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88135"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:32.857Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88135","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88136","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88136 — Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over…","description":"Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88136"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:33.030Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88136","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88147","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88147 — Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized a…","description":"Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88147"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:34.543Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88147","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88149 — Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat…","description":"Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:34.723Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88149","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88150","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88150 — Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute co…","description":"Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:34.910Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88150","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88152","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88152 — Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attack…","description":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88152"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:35.153Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88152","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88155","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88155 — Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute c…","description":"Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:35.590Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88155","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88161","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88161 — Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate pr…","description":"Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:36.560Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88161","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88163","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88163 — Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execu…","description":"Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88163","CVE-2026-88166"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:36.900Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88163","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88166","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88165","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88165 — Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute cod…","description":"Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88165"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:37.020Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88165","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88171","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88171 — Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","description":"Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88171"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:37.710Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88171","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88193","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88193 — Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr…","description":"Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88193"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:40.647Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88193","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88196","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88196 — Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over…","description":"Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88196","CVE-2026-88197","CVE-2026-108444"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:41.150Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88196","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88197","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108444","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88200","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88200 — Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to el…","description":"Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-88200"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:41.547Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88210","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88210 — Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized…","description":"Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-88210","CVE-2026-108433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:42.653Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88210","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108433","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88219","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88219 — Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a…","description":"Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88219"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:42.773Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88219","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-92908","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92908 — Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi…","description":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability. Ex…","indicators":{"cves":["CVE-2026-92908","CVE-2026-92910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:43.487Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://www.adobe.com/trust/security/products/commerce/apsb26-153.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95943","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95943 — Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate…","description":"Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-95943"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:44.983Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95943","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96044","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96044 — No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privil…","description":"No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-96044"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:45.113Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96071","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96071 — Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n…","description":"Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96071"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:45.223Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96071","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96108","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96108 — Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally…","description":"Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:45.583Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96108","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96118","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96118 — Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges lo…","description":"Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96118"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:45.880Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96118","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96186","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96186 — Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacke…","description":"Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96186"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:46.207Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96186","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96188","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96188 — External control of system or configuration setting in Microsoft PowerToys allows an authorized atta…","description":"External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96188"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:46.393Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96188","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96202","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96202 — Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute…","description":"Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96202"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:46.520Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96202","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96209","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96209 — Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privilege…","description":"Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96209"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:46.940Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96209","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96220","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96220 — Improper control of generation of code ('code injection') in Windows Assigned Access allows an autho…","description":"Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96220"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:47.890Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96220","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96222","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96222 — Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthoriz…","description":"Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-96222"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:48.030Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96230","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96230 — Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core…","description":"Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96230"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:48.720Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96230","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96232","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96232 — Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.","description":"Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-96232"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:48.960Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96232","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96233","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96233 — Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.","description":"Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-96233"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:49.083Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96233","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96237","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96237 — Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to…","description":"Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96237"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:49.587Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96237","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96243","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96243 — Improper link resolution before file access ('link following') in Windows WalletService allows an au…","description":"Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96243"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:49.820Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96243","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96244","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96244 — Use after free in Windows Internal System User Profile allows an authorized attacker to elevate priv…","description":"Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96244"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:49.980Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96244","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96246","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96246 — Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose inform…","description":"Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-96246"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:50.407Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96246","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96248","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96248 — Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny…","description":"Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-96248"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:50.773Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96248","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96250","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96250 — Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges local…","description":"Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96250","CVE-2026-96253","CVE-2026-96254","CVE-2026-96301","CVE-2026-96304","CVE-2026-96310","CVE-2026-96319"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:51.050Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96250","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96253","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96254","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96301","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96304","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96310","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96319","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96251","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96251 — Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized a…","description":"Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96251"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:51.193Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96306","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96306 — Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges lo…","description":"Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96306"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:52.750Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96306","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96309","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96309 — Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96309"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:53.263Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96309","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96313","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96313 — Missing authentication for critical function in Windows Push Notifications allows an authorized atta…","description":"Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96313"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:53.880Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96313","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96318","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96318 — Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges loc…","description":"Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96318"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:54.700Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96318","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96322","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96322 — Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privilege…","description":"Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96322"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:55.323Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96322","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96323","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96323 — Use after free in Windows Update allows an authorized attacker to elevate privileges locally.","description":"Use after free in Windows Update allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96323"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:56.853Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96323","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96325","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96325 — Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker…","description":"Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-96325"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:57.170Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96325","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96844","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96844 — Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker t…","description":"Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":["CVE-2026-96844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:57.530Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96844","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96861","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96861 — Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to de…","description":"Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-96861","CVE-2026-96866"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:00.163Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96861","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96866","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96867","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96867 — Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.","description":"Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-96867"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:01.200Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96867","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96912","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96912 — Use after free in Windows Client License Service allows an authorized attacker to elevate privileges…","description":"Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96912"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:02.050Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96912","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96915","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96915 — Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to eleva…","description":"Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96915"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:02.523Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96915","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96918","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96918 — Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.","description":"Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96918"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:03.030Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96918","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96920","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96920 — Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a…","description":"Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96920"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:03.340Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96920","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96923","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96923 — Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges lo…","description":"Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96923"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:03.690Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96923","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96939","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96939 — Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized at…","description":"Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96939"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:06.230Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96939","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96943","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96943 — Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to exe…","description":"Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-96943"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:06.470Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96943","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96951","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96951 — Improper neutralization of special elements used in a command ('command injection') in Windows Shell…","description":"Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-96951"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:07.760Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-96951","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96953","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96953 — Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an author…","description":"Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-96953"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:08.087Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96953","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96957","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96957 — Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a…","description":"Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-96957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:08.267Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96959","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96959 — Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny…","description":"Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-96959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:08.527Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96960","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96960 — Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny serv…","description":"Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-96960"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:08.670Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96995","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96995 — Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privil…","description":"Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96995"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:08.813Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96995","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96997","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96997 — Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges local…","description":"Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-96997"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:09.060Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96997","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97008","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97008 — Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to…","description":"Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:09.810Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97008","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97011","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97011 — Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute c…","description":"Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97011"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:10.170Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97011","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97739","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97739 — Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to…","description":"Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97739","CVE-2026-97746"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:11.050Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97739","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97746","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97742","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97742 — Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute cod…","description":"Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97742","CVE-2026-97750","CVE-2026-97761","CVE-2026-97770"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:11.440Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97742","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97750","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97761","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97770","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97762","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97762 — Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a…","description":"Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97762"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:13.990Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97762","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97767","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97767 — Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network…","description":"Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97767","CVE-2026-97772"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:14.487Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97767","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97772","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97774","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97774 — Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authori…","description":"Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:15.350Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97774","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97778","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97778 — Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute…","description":"Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97778"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:15.830Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97778","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97781","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97781 — Improper neutralization of special elements used in a command ('command injection') in Microsoft Off…","description":"Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-97781"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:16.197Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97781","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97788","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97788 — Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack…","description":"Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-97788"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:16.697Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97788","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97793","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97793 — Missing authentication for critical function in Windows Setup and Deployment allows an authorized at…","description":"Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97793"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:17.353Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97793","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97794","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97794 — Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an a…","description":"Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97794","CVE-2026-97810"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:17.507Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97794","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97810","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97798","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97798 — Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error…","description":"Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:17.640Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97798","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97799","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97799 — Improper verification of cryptographic signature in Windows Audio Service allows an authorized attac…","description":"Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97799"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:17.780Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97799","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97800","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97800 — Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authoriz…","description":"Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97800"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:17.900Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97800","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97801","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97801 — Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to…","description":"Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.","indicators":{"cves":["CVE-2026-97801"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:18.023Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97801","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97811","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97811 — Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.","description":"Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97811"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:19.310Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97811","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97812","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97812 — Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileg…","description":"Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-97812"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:19.467Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97812","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97830","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97830 — Double free in Windows Internet Information Services allows an unauthorized attacker to deny service…","description":"Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-97830"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:22.557Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97830","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102234","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102234 — Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized att…","description":"Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-102234"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:06.477Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102234","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102235","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102235 — Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to exe…","description":"Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-102235"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:06.607Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102235","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103830","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103830 — Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in…","description":"Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103830","CVE-2026-103851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:09.290Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-stager/apsb26-170.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103832","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103832 — Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitr…","description":"Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103832","CVE-2026-103833","CVE-2026-103834","CVE-2026-103835","CVE-2026-103836","CVE-2026-103837","CVE-2026-103838","CVE-2026-103839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:09.410Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-stager/apsb26-170.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103840","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103840 — Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file,…","description":"Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issu…","indicators":{"cves":["CVE-2026-103840","CVE-2026-103841","CVE-2026-103842"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:10.340Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-stager/apsb26-170.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103843","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103843 — Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary co…","description":"Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:10.680Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-stager/apsb26-170.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103844","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103844 — Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code ex…","description":"Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:10.790Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-171.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103845","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103845 — Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbi…","description":"Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user int…","indicators":{"cves":["CVE-2026-103845"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:10.910Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-171.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103846","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103846 — Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerabilit…","description":"Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of t…","indicators":{"cves":["CVE-2026-103846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:11.023Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-171.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103847","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103847 — Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code…","description":"Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute…","indicators":{"cves":["CVE-2026-103847"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:11.153Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-171.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103854","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103854 — Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary…","description":"Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:12.023Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-171.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106634","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106634 — Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directo…","description":"Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file s…","indicators":{"cves":["CVE-2026-106634"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:17.103Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110083","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110083 — Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQ…","description":"Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized…","indicators":{"cves":["CVE-2026-110083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:27.090Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110084","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110084 — Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability t…","description":"Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation…","indicators":{"cves":["CVE-2026-110084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:27.217Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55601","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55601 — MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earli…","description":"MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-controlled matched input to a configured command inside double quotes, then check_filter_exec() in mt.c passed the constructed command th…","indicators":{"cves":["CVE-2026-55601"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:29.477Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/folkertvanheusden/multitail/commit/84f304e140261034e33796bab81e9bf4f09d153c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/folkertvanheusden/multitail/issues/56","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/folkertvanheusden/multitail/security/advisories/GHSA-54vm-wwx8-856h","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/folkertvanheusden/multitail/security/advisories/GHSA-54vm-wwx8-856h","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63149 — Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows att…","description":"Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated by Txt::defaultPassword() using PHP's uniqid() function based on server time in microseconds. Attackers who observe or approximate th…","indicators":{"cves":["CVE-2026-63149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:30.617Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-predictable-default-password-via-uniqid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63152","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63152 — Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allo…","description":"Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategoryFilter parameter, which is persisted into the session and later concatenated into a SQL statement without parameterization. Attack…","indicators":{"cves":["CVE-2026-63152"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:30.750Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-second-order-sql-injection-via-idcategoryfilter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63153","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63153 — Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectat…","description":"Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right records for a caller-supplied target space without verifying the caller has rights to that space. Attackers can assign access affectat…","indicators":{"cves":["CVE-2026-63153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:30.880Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-broken-access-control-via-setaffectations","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63154","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63154 — Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows…","description":"Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-controlled agoraFields[] names as unvalidated SQL column identifiers during the user import flow. Attackers can inject privileged colu…","indicators":{"cves":["CVE-2026-63154"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.010Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-sql-identifier-injection-via-agorafields","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63158","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63158 — Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows a…","description":"Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authenticate as that user without knowing the actual password, caused by the legacy AGORAP_LOG/AGORAP_PASS cookie mechanism treating the sto…","indicators":{"cves":["CVE-2026-63158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.143Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-pass-the-hash-authentication-bypass-via-cookies","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63159","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63159 — Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability tha…","description":"Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1(login.password), a deterministic and reusable value. Attackers can derive or brute-force the reset to…","indicators":{"cves":["CVE-2026-63159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.273Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-predictable-password-reset-token-account-takeover","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63160","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63160 — Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me tok…","description":"Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bearer credential held in the user's cookie. Attackers who gain access to the stored token, such as through database or back…","indicators":{"cves":["CVE-2026-63160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.420Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-insecure-remember-me-token-storage","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63161","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63161 — Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote…","description":"Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id upo…","indicators":{"cves":["CVE-2026-63161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.550Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-session-fixation-via-authentication","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63162","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63162 — Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers…","description":"Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can exploit this flaw, for example by settin…","indicators":{"cves":["CVE-2026-63162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.687Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-path-traversal-via-tmpfoldername-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63163","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63163 — Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileF…","description":"Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary files by computing an md5(filename) token instead of passing a proper authorization check. Attackers can guess or determin…","indicators":{"cves":["CVE-2026-63163"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.817Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-broken-access-control-via-mobilefiledownload","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63165","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63165 — Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functi…","description":"Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulating the sortEvents parameter, which is concatenated into the ORDER BY clause without sanitization in app/ModCalendar/CtrlCalendar.php.…","indicators":{"cves":["CVE-2026-63165"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:31.947Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-sql-injection-via-sortevents-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63172","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63172 — Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a…","description":"Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invoking the user-edit action without a function-level authorization check. Attackers can exploit the missing editRight() enforcement in a…","indicators":{"cves":["CVE-2026-63172","CVE-2026-63174"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:32.080Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-broken-function-level-authorization-via-user-edit","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-broken-access-control-via-spaceaffectlist","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-70098","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-70098 — Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a n…","description":"Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70098"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:48.553Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70098","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-86016","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86016 — VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_me…","description":"VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can t…","indicators":{"cves":["CVE-2026-86016"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:18:55.303Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/vnotex/vnote/commit/7371efde531312eb24beb982fb5fdd73469cb171","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vnotex/vnote/releases/tag/v4.3.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vnotex/vnote/security/advisories/GHSA-vfhj-c636-h59x","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-86022","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86022 — VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps…","description":"VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::start(const QString&) reparses into arguments through ProcessUtils::startDetached. The automatic path in src/contro…","indicators":{"cves":["CVE-2026-86022"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:18:55.473Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/vnotex/vnote/commit/4abaacdb8dd110d279f3290ad7e69f20b2604602","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vnotex/vnote/releases/tag/v4.3.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vnotex/vnote/security/advisories/GHSA-6m2r-wm6v-c8qp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/vnotex/vnote/security/advisories/GHSA-6m2r-wm6v-c8qp","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100111","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100111 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary…","description":"Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-100111","CVE-2026-100112","CVE-2026-104346","CVE-2026-104347","CVE-2026-95637","CVE-2026-95641","CVE-2026-96521","CVE-2026-96522","CVE-2026-96523","CVE-2026-97312"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:14.397Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100127","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100127 — Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execu…","description":"Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-100127","CVE-2026-100128","CVE-2026-100129"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:14.753Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/bridge/apsb26-167.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103821","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103821 — Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbi…","description":"Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103821"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:23.193Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-designer/apsb26-169.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104348","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104348 — Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arb…","description":"Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-104348","CVE-2026-95638"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:25.593Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105442","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105442 — IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.…","description":"IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service.","indicators":{"cves":["CVE-2026-105442"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:26.913Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292221","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105443","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105443 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation bet…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.","indicators":{"cves":["CVE-2026-105443"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:27.100Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292226","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105900","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105900 — ColdFusion is affected by an Improper Input Validation vulnerability that could result in an applica…","description":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","indicators":{"cves":["CVE-2026-105900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:29.593Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106616","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106616 — ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerabi…","description":"ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue…","indicators":{"cves":["CVE-2026-106616"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:30.810Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106623","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106623 — ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of…","description":"ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.","indicators":{"cves":["CVE-2026-106623"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:31.597Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-62840","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-62840 — Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to e…","description":"Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-62840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:40.033Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62840","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-65674","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-65674 — Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a…","description":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-65674"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:41.157Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65674","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-67625","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-67625 — Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a networ…","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-67625","CVE-2026-83945","CVE-2026-85886","CVE-2026-94512"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:41.343Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67625","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83945","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85886","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94512","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-67628","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-67628 — Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a networ…","description":"Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-67628","CVE-2026-85888","CVE-2026-88081"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:41.610Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67628","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85888","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88081","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-68883","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-68883 — Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a…","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-68883"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:41.847Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68883","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-75996","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-75996 — ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to appl…","description":"ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not requir…","indicators":{"cves":["CVE-2026-75996"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:20.620Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-83661","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83661 — Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result i…","description":"Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-83661","CVE-2026-95636"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:32.667Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-83965","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83965 — Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result i…","description":"Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-83965"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:09.290Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-sampler/apsb26-159.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-83966","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83966 — Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbit…","description":"Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-83966"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:09.400Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-sampler/apsb26-159.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85876","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85876 — Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","description":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85876"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:30.767Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85876","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85919","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85919 — Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally…","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-85919","CVE-2026-88082","CVE-2026-88085"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:34.053Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85919","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88082","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88085","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88083","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88083 — Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a net…","description":"Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-88083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:42.810Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88083","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88088","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88088 — Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges loc…","description":"Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-88088"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:43.307Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88088","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93905","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-93905 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.","indicators":{"cves":["CVE-2026-93905"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:57.863Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292232","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95635","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95635 — Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code exe…","description":"Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a mal…","indicators":{"cves":["CVE-2026-95635"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:58.603Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95639","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95639 — Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbit…","description":"Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim mu…","indicators":{"cves":["CVE-2026-95639"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:59.073Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95695","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95695 — IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker…","description":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.","indicators":{"cves":["CVE-2026-95695","CVE-2026-95696"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:59.413Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292228","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96956","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96956 — Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a…","description":"Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-96956"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:20:14.737Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96956","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100113","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100113 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result…","description":"CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction…","indicators":{"cves":["CVE-2026-100113","CVE-2026-100117","CVE-2026-100119","CVE-2026-100120","CVE-2026-100124","CVE-2026-100125","CVE-2026-100135","CVE-2026-102501","CVE-2026-104345","CVE-2026-48377","CVE-2026-48378"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:09.967Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100114","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100114 — CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in…","description":"CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.","indicators":{"cves":["CVE-2026-100114","CVE-2026-100115"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:10.290Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100116","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100116 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could r…","description":"CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's co…","indicators":{"cves":["CVE-2026-100116","CVE-2026-100118","CVE-2026-100121","CVE-2026-100122","CVE-2026-100123","CVE-2026-103294"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:10.533Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100136","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100136 — CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could re…","description":"CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require u…","indicators":{"cves":["CVE-2026-100136"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:12.030Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100137","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100137 — CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could…","description":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do…","indicators":{"cves":["CVE-2026-100137","CVE-2026-100138","CVE-2026-100139","CVE-2026-105902","CVE-2026-106627"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:12.150Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102502","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102502 — CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerabi…","description":"CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue do…","indicators":{"cves":["CVE-2026-102502","CVE-2026-103296","CVE-2026-103297","CVE-2026-95632","CVE-2026-95633"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:21.600Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110137","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110137 — Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execut…","description":"Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110137"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:33.447Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/561997899","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110138","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110138 — Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker w…","description":"Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110138"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:33.560Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568899705","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110139","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110139 — Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute…","description":"Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110139","CVE-2026-110151","CVE-2026-110153","CVE-2026-110167","CVE-2026-110171","CVE-2026-110172"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:33.667Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568037533","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570638834","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/565742182","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570461696","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570675082","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568719352","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110140","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110140 — Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute ar…","description":"Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110140"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:33.777Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/562038980","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110144","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110144 — Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a loca…","description":"Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110144"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:34.203Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/565252396","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110145","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110145 — Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who ha…","description":"Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110145","CVE-2026-110158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:34.313Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/562243925","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/562242421","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110148","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110148 — Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute a…","description":"Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","indicators":{"cves":["CVE-2026-110148","CVE-2026-110157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:34.637Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570050934","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570047270","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110154","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110154 — Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potent…","description":"Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110154"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:35.293Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570167920","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110155","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110155 — Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execu…","description":"Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:35.400Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/570167922","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110156","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110156 — Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allow…","description":"Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110156"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:35.513Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/561892119","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110162","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110162 — Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execu…","description":"Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:36.160Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/540499008","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110163","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110163 — Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute a…","description":"Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110163"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:36.267Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568831102","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110164","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110164 — Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potential…","description":"Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110164"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:36.377Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568730794","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110166","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110166 — Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to ex…","description":"Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110166"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:36.590Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/566496747","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110168","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110168 — Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute ar…","description":"Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110168","CVE-2026-110169"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:36.800Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568010382","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/567088929","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77206","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77206 — Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for auth…","description":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-thr…","indicators":{"cves":["CVE-2026-77206"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:18:24.727Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://libreswan.org/security/CVE-2026-77206/","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"},{"url":"https://libreswan.org/security/CVE-2026-77206/CVE-2026-77206.txt","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77207","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77207 — Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authent…","description":"Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with SEC_PKCS7…","indicators":{"cves":["CVE-2026-77207"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:18:26.040Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://libreswan.org/security/CVE-2026-77207/","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"},{"url":"https://libreswan.org/security/CVE-2026-77207/CVE-2026-77207.txt","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94453","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-94453 — Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over…","description":"Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicious) is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to ifac…","indicators":{"cves":["CVE-2026-94453"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:19:30.253Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://libreswan.org/security/CVE-2026-94453/","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"},{"url":"https://libreswan.org/security/CVE-2026-94453/CVE-2026-94453.txt","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95634","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95634 — CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could…","description":"CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","indicators":{"cves":["CVE-2026-95634"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:19:30.853Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92817","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92817 — The Ignition Perspective module does not properly validate session privileges when determining Desig…","description":"The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could provide their valid Vision session identifier and gain Designer-level privileges. An attacker could exploit these elevated…","indicators":{"cves":["CVE-2026-92817"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T00:17:13.290Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-286-01.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://security.inductiveautomation.com/?tcuUid=34477620-731d-4b70-b22b-9450f9a659a3","label":"ics-cert@hq.dhs.gov","domainType":"other"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-01","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110359","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110359 — Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is c…","description":"Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges.","indicators":{"cves":["CVE-2026-110359"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T01:17:06.203Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/JNDataRT/Vulns/blob/main/Advisories/2026/1.md","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103423","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103423 — The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to…","description":"The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve personally ide…","indicators":{"cves":["CVE-2026-103423"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:16:54.710Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php#L241","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php#L4383","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/lib/Schedule.php#L10030","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/lib/Schedule.php#L6611","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/lib/Schedule.php#L7087","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3728015/booking-package/trunk/lib/Schedule.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10063035-5f91-4dbe-b559-ea5be50d6950?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104767","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104767 — The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnera…","description":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the `maybe_add_role_to_user()` function unconditionally re-assigning every role stored in the `dfxwcrc_foreign_ro…","indicators":{"cves":["CVE-2026-104767"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:16:56.360Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/dfx-woo-role-changer/trunk/dfx-woo-role-changer.php#L351","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/dfx-woo-role-changer/trunk/dfx-woo-role-changer.php#L414","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/dfx-woo-role-changer/trunk/dfx-woo-role-changer.php#L427","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/dfx-woo-role-changer/trunk/dfx-woo-role-changer.php#L468","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3732550%40dfx-woo-role-changer&new=3732550%40dfx-woo-role-changer","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/833d9f92-9af1-4332-9b1d-2d1d37073b4b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104995","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104995 — The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to,…","description":"The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the client-controlled 'bps_directory' cookie during BuddyPress AJAX directory requests. The bps_directory_ajax() filter (hooked onto bp_leg…","indicators":{"cves":["CVE-2026-104995"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:16:56.500Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/5.9/bps-directory.php#L186","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/5.9/bps-directory.php#L408","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/5.9/bps-search.php#L6","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/bp-profile-search/tags/6.0/bps-directory.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737650","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a35419ff-a342-4480-9288-e98dee5afabc?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17092","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-17092 — The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vu…","description":"The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible…","indicators":{"cves":["CVE-2026-17092","CVE-2026-100185"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:16:59.783Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.7.3/includes/asset-loader/localized_data.php#L92","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.7.3/includes/classes/class-ajax-handler.php#L1256","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.7.3/includes/classes/class-ajax-handler.php#L1260","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.7.3/includes/classes/class-ajax-handler.php#L24","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.7.3/includes/classes/class-listing-db.php#L101","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.7.3/includes/classes/class-roles.php#L142","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.8.7/includes/asset-loader/localized_data.php#L92","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.8.7/includes/classes/class-ajax-handler.php#L1256","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.8.7/includes/classes/class-ajax-handler.php#L1260","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.8.7/includes/classes/class-ajax-handler.php#L24","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.8.7/includes/classes/class-listing-db.php#L101","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.8.7/includes/classes/class-roles.php#L142","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3730035%40directorist&new=3730035%40directorist","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bd520915-2605-450a-9abd-423f1c226eb6?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.9.6/includes/classes/class-add-listing.php#L303","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.9.6/includes/model/SingleListing.php#L1491","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/directorist/tags/8.9.6/templates/single/fields/map.php#L10","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bdddb715-4c49-419f-a599-51ff0857393a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-82715","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-82715 — Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Dr…","description":"Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.\n\nThis issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.","indicators":{"cves":["CVE-2026-82715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:17:00.863Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-137/index.html","label":"hirt@hitachi.co.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102251","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102251 — The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection v…","description":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…","indicators":{"cves":["CVE-2026-102251"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:12.513Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.tychesoftwares.com/docs/docs/abandoned-cart-pro-for-woocommerce-new/changelog-abandoned-cart-pro/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.tychesoftwares.com/products/woocommerce-abandoned-cart-pro-plugin/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a656312d-1ddf-48d5-81bf-180c67b32e39?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103422","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103422 — The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' par…","description":"The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 0.3.6. This is due to insufficient input sanitization on the public /wp-json/anycomment/v1/subscribe REST endpoint and missing output escaping in AnyCommentSub…","indicators":{"cves":["CVE-2026-103422"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:14.037Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/anycomment/tags/0.3.6/includes/Admin/Tables/AnyCommentSubscriptionsTable.php#L107","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/anycomment/tags/0.3.6/includes/Models/AnyCommentSubscriptions.php#L311","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/anycomment/tags/0.3.6/includes/Rest/AnyCommentRestSubscriptions.php#L124","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/anycomment/tags/0.3.6/includes/Rest/AnyCommentRestSubscriptions.php#L59","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ce925d1c-2254-49ea-9fcf-e948813b3f2c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110444","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110444 — TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthentica…","description":"TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code wi…","indicators":{"cves":["CVE-2026-110444","CVE-2026-110445"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:20.363Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.twcert.org.tw/en/cp-139-11271-be75e-2.html","label":"twcert@cert.org.tw","domainType":"other"},{"url":"https://www.twcert.org.tw/tw/cp-132-11270-88d86-1.html","label":"twcert@cert.org.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14765","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-14765 — Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configurat…","description":"Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL). The URL scheme filter (FURLRequestFilter) is empty by default, which permits all URL schemes. On Windows, this results in a call…","indicators":{"cves":["CVE-2026-14765"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T03:17:21.927Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://khaelkugler.com/blogs/meccha_chameleon.html","label":"cve@takeonme.org","domainType":"other"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001011111111101111111111110000000000000000000000000000000000000000000000000000001011","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100153","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100153 — The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_ST…","description":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arb…","indicators":{"cves":["CVE-2026-100153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:03.177Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/includes/nsp-core.php#L876","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/newstatpress.php#L1453","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/newstatpress.php#L839","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3a7196-690b-45bb-a34f-05981f6780f1?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110449","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110449 — Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write w…","description":"Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.","indicators":{"cves":["CVE-2026-110449"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:17.317Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77114","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77114 — The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumb…","description":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject a…","indicators":{"cves":["CVE-2026-77114"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:36.537Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/document-gallery/tags/5.1.1/src/admin/tabs/logging-tab.php#L99","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/document-gallery/tags/5.1.1/src/inc/thumbers/class-thumber-co-thumber.php#L181","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/document-gallery/tags/5.1.1/src/inc/thumbers/thumber-co/class-thumber-client.php#L169","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/document-gallery/tags/5.1.1/src/inc/thumbers/thumber-co/thumber-client/client.php#L124","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8ec539ce-aa55-458d-9330-6b6513791ad3?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78193","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-78193 — The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via…","description":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…","indicators":{"cves":["CVE-2026-78193"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:36.860Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/includes/JtlConnector.php#L27","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/src/Mapper/PrimaryKeyMapper.php#L85","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/src/Utilities/Db.php#L77","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/src/Utilities/SqlTraits/PrimaryKeyMappingTrait.php#L68","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Application/Application.php#L429","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-jtl-connector/tags/2.4.3/vendor/jtl/connector/src/Linker/IdentityLinker.php#L133","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a74ef04c-6fa3-45c6-bab1-b3c730e4898d?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-83592","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83592 — The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…","description":"The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitr…","indicators":{"cves":["CVE-2026-83592"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:38.893Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/contact-form-db-for-enfold/tags/2.0.2/admin/ecf_index.php#L31","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/contact-form-db-for-enfold/tags/2.0.2/enfold-contact-form.php#L78","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/contact-form-db-for-enfold/tags/2.0.2/enfold-contact-form.php#L85","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/af085fb0-fdad-4a60-aa15-6d0fe19c2074?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93885","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-93885 — The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to S…","description":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…","indicators":{"cves":["CVE-2026-93885"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:54.973Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/cryptocurrency-donation-box/trunk/admin/table/cdbbc-list-table.php#L109","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cryptocurrency-donation-box/trunk/cryptocurrency-donation-box.php#L83","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cryptocurrency-donation-box/trunk/includes/cdbbc-payment-verify.php#L57","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cryptocurrency-donation-box/trunk/includes/cdbbc-payment-verify.php#L98","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cryptocurrency-donation-box/trunk/includes/cdbbc-shortcode.php#L75","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9c3724f3-ebd9-4804-88e0-804fd423af3a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94377","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-94377 — The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripti…","description":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…","indicators":{"cves":["CVE-2026-94377"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:55.297Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/netreviews/trunk/api_functions.php#L1059","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/netreviews/trunk/api_functions.php#L1210","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/netreviews/trunk/api_functions.php#L517","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/netreviews/trunk/api_functions.php#L72","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/netreviews/trunk/includes/review_Pagination.php#L217","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/netreviews/trunk/netreviews.php#L69","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a5ed3612-68c8-49a9-915d-c54e002506a4?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95808","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95808 — The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is v…","description":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…","indicators":{"cves":["CVE-2026-95808"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:56.467Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.47/form-maker.php#L1229","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.47/form-maker.php#L931","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.47/framework/WDW_FM_Library.php#L366","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.47/framework/WDW_FM_Library.php#L6274","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.47/framework/WDW_FM_Library.php#L6809","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/form-maker/tags/1.15.47/frontend/controllers/form_maker.php#L321","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3730401%40form-maker&new=3730401%40form-maker","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d51a8673-8fe0-4329-970d-085db5cdf2d3?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95816","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95816 — The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to…","description":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping. This makes it possible for unauthen…","indicators":{"cves":["CVE-2026-95816"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:56.647Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/smart-forms/trunk/js/dist/Entries_bundle.js#L388","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/smart-forms/trunk/js/dist/Entries_bundle.js#L588","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/smart-forms/trunk/js/dist/Entries_bundle.js#L802","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/smart-forms/trunk/smart-forms-ajax.php#L227","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/smart-forms/trunk/smartforms.php#L63","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ace194b6-c794-417c-9870-db8ebaa4cf7a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96661","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96661 — The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gme…","description":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it…","indicators":{"cves":["CVE-2026-96661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:19:01.350Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/app/access.php#L131","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/app/access.php#L36","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/inc/db.connect.php#L1682","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/inc/db.connect.php#L2206","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0592050d-4e72-4b40-a88b-b92e53c49e9e?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97398","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97398 — The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…","description":"The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and including, 7.5.54.7212 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in…","indicators":{"cves":["CVE-2026-97398"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:19:05.300Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/fv-wordpress-flowplayer/trunk/controller/frontend.php#L664","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fv-wordpress-flowplayer/trunk/controller/shortcodes.php#L33","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fv-wordpress-flowplayer/trunk/models/flowplayer.php#L1032","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3731114%40fv-wordpress-flowplayer&new=3731114%40fv-wordpress-flowplayer","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e06fbb3b-f93f-44da-83fb-f469f541e206?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101924","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101924 — The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to…","description":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin records i…","indicators":{"cves":["CVE-2026-101924"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:41.567Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/includes/nsp-overview.php#L320","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/newstatpress.php#L1447","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/newstatpress/tags/1.4.5/newstatpress.php#L839","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/234d79fc-5f00-457d-a693-ad3f6d38447b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105429","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105429 — Improper neutralization of special elements in the NetBird client SSH configuration manager (client/…","description":"Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide Ope…","indicators":{"cves":["CVE-2026-105429"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:42.487Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/netbirdio/netbird/pull/6805","label":"33c584b5-0579-4c06-b2a0-8d8329fcab9c","domainType":"primary"},{"url":"https://github.com/netbirdio/netbird/releases/tag/v0.74.7","label":"33c584b5-0579-4c06-b2a0-8d8329fcab9c","domainType":"primary"},{"url":"https://github.com/netbirdio/netbird/security/advisories/GHSA-xmg2-v32j-x2hf","label":"33c584b5-0579-4c06-b2a0-8d8329fcab9c","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110450","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110450 — Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it…","description":"Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.","indicators":{"cves":["CVE-2026-110450"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:42.917Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110454","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110454 — A malicious actor with access to the network could exploit an Improper Access Control vulnerability…","description":"A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.","indicators":{"cves":["CVE-2026-110454","CVE-2026-110459"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:43.523Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73","label":"fe490ce8-0395-4072-90d8-2707e1bdf984","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110455","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110455 — A malicious actor with access to the network and under certain conditions could exploit an Improper…","description":"A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.","indicators":{"cves":["CVE-2026-110455","CVE-2026-110456"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:43.647Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73","label":"fe490ce8-0395-4072-90d8-2707e1bdf984","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-50218","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-50218 — Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT t…","description":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthoriz…","indicators":{"cves":["CVE-2026-50218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T06:17:06.900Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog/","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103307","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103307 — The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly saniti…","description":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injectio…","indicators":{"cves":["CVE-2026-103307"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.127Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/4e67fefd-56d9-4bfd-9e19-a2b5fff1e7a2/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107126","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107126 — The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controll…","description":"The WP Booking System  WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute in the session…","indicators":{"cves":["CVE-2026-107126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.350Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/8496584c-f6b8-44e9-b27d-26d508be6914/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107508","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107508 — The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used t…","description":"The Ultimate Multisite  WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file to include, allowing unauthenticated attackers to include and read arbitrary local files, including the WordPress configuration file.","indicators":{"cves":["CVE-2026-107508"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.983Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/2b2808d3-b3fc-41d4-8be5-82d222911bc6/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86787","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86787 — The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supp…","description":"The affiliate-toolkit  WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server.","indicators":{"cves":["CVE-2026-86787"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:03.643Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/ec9f71ee-fd44-46fc-989e-3b63ac04e8c3/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86799","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86799 — The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor esca…","description":"The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions screen in the administration dashboard, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of any ad…","indicators":{"cves":["CVE-2026-86799"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:03.860Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/75bdda94-06b3-4747-bcd2-903167ac1c00/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89288","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89288 — The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it…","description":"The Fast Courier  WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","indicators":{"cves":["CVE-2026-89288"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:04.387Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/8b651892-fc8a-4c8b-a04d-5c76b5b85577/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103367","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103367 — The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Incl…","description":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php f…","indicators":{"cves":["CVE-2026-103367"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:02.553Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/shopmagic-for-woocommerce/tags/4.9.0/src/Customer/Guest/GuestFactory.php#L34","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/shopmagic-for-woocommerce/tags/4.9.0/src/Workflow/Placeholder/Builtin/Customer/CustomerFirstName.php#L19","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/shopmagic-for-woocommerce/tags/4.9.0/src/Workflow/Placeholder/Builtin/Order/OrderProductsOrdered.php#L58","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/shopmagic-for-woocommerce/tags/4.9.0/src/Workflow/Placeholder/PlaceholderProcessor.php#L47","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/shopmagic-for-woocommerce/tags/4.9.0/vendor_prefixed/wpdesk/wp-view/src/Renderer/SimplePhpRenderer.php#L47","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/shopmagic-for-woocommerce/tags/4.9.1","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/56c9fe56-8b15-409f-815b-10ee93f5153a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104761","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104761 — The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' p…","description":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above,…","indicators":{"cves":["CVE-2026-104761","CVE-2026-109512","CVE-2026-109998"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:03.150Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L142","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L144","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L156","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L160","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L134","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L78","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/api/mb-template.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/mangboard/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/66a339e2-5744-4a12-8751-6e4662ddc347?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/includes/functions/func.api.php#L85","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/includes/skin-filters.php#L75","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.4/includes/skin-template.php#L503","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743247/mangboard/trunk/includes/skin-filters.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/71b1e2f1-a287-4b9b-94bb-b860bc4748c3?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-board.php#L24","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L150","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-template.php#L177","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L146","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3738899%40mangboard&new=3738899%40mangboard","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9fe455dc-8138-49d0-97a1-b0dce111d23b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104764","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104764 — The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all…","description":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No…","indicators":{"cves":["CVE-2026-104764"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:03.297Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.svn.wordpress.org/post-export-import-with-media/trunk/","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-page-handler.php#L230","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-page-handler.php#L370","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-page-handler.php#L646","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-page-handler.php#L877","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3726397/post-export-import-with-media/trunk/includes/class-page-handler.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bf16e980-7cee-4f62-8a2d-0cf73fc2ca26?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104909","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104909 — The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…","description":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing th…","indicators":{"cves":["CVE-2026-104909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:03.443Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/class.board.php#L175","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/class.store.php#L124","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.board.php#L360","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/mangboard.php#L181","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/includes/functions/func.board.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/mangboard/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cbf1cbe0-4740-4d76-a3f5-7d2e1a64d4ee?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105106","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105106 — Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.…","description":"Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::remove_at_job without validating it. Schedule::At::remove substitutes the supplied job ID into an atrm…","indicators":{"cves":["CVE-2026-105106"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:03.587Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42674","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"},{"url":"https://download.koha-community.org/","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28739","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30076","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"},{"url":"https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42674","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105107","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105107 — Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.…","description":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an a…","indicators":{"cves":["CVE-2026-105107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:03.747Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42736","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"},{"url":"https://download.koha-community.org/","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6428","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-70372","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107631","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107631 — The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Sit…","description":"The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'uid' parameter in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…","indicators":{"cves":["CVE-2026-107631"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:04.260Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/record-of-consent-extension-for-complianz/tags/2.5/includes/admin-tab-records.php#L643","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/record-of-consent-extension-for-complianz/tags/2.5/includes/class-rocext-consent-handler.php#L105","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/record-of-consent-extension-for-complianz/tags/2.5/includes/class-rocext-consent-handler.php#L289","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/record-of-consent-extension-for-complianz/tags/2.5/js/admin.js#L701","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3736545%40record-of-consent-extension-for-complianz%2Ftags%2F2.6&old=3736488%40record-of-consent-extension-for-complianz%2Ftags%2F2.5","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/record-of-consent-extension-for-complianz/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f56e7de-5a85-4b99-95d3-596af7694394?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107751","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107751 — The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name'…","description":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…","indicators":{"cves":["CVE-2026-107751"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:04.570Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/api/mb-board.php#L24","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/functions/func.api.php#L146","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/mb-actions.php#L520","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/includes/skin-filters.php#L50","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mangboard/tags/2.4.3/templates/tpl.button.php#L75","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3738898/mangboard/trunk/templates/tpl.button.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/mangboard/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/72650c92-918a-4486-9365-11bcb6b6741a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110284","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110284 — The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable t…","description":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is due to the llms_get_template() helper performing extra…","indicators":{"cves":["CVE-2026-110284"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:05.747Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/lifterlms/tags/10.3.1/includes/functions/llms.functions.template.php#L102","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lifterlms/tags/10.3.1/includes/functions/llms.functions.template.php#L120","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lifterlms/tags/10.3.1/includes/shortcodes/class.llms.shortcode.checkout.php#L138","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lifterlms/tags/10.3.1/includes/shortcodes/class.llms.shortcode.checkout.php#L200","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lifterlms/tags/10.3.1/includes/shortcodes/class.llms.shortcodes.php#L412","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3736899/lifterlms/trunk/includes/functions/llms.functions.template.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/631c4d14-8b33-47ed-a2ff-68b2b2906b84?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92392","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92392 — During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_…","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object.","indicators":{"cves":["CVE-2026-92392"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:05.997Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://curl.se/docs/CVE-2026-92392.html","label":"2499f714-1537-4658-8207-48ae4bb9eae9","domainType":"other"},{"url":"https://curl.se/docs/CVE-2026-92392.json","label":"2499f714-1537-4658-8207-48ae4bb9eae9","domainType":"other"},{"url":"https://hackerone.com/reports/4030333","label":"2499f714-1537-4658-8207-48ae4bb9eae9","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/18/5","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/18/6","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"https://hackerone.com/reports/4030333","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73790","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73790 — A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.","description":"A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.","indicators":{"cves":["CVE-2026-73790"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T09:17:22.613Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73793","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73793 — HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.","description":"HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.","indicators":{"cves":["CVE-2026-73793"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:56.480Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86476","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86476 — A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video…","description":"A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the vide…","indicators":{"cves":["CVE-2026-86476"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:56.850Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86476","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529510","label":"secalert@redhat.com","domainType":"other"},{"url":"https://redhat.atlassian.net/browse/PSIRTSUPT-23320","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88829","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88829 — A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward r…","description":"A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request on a TCP connection has its path rewritten. An attacker can send a pipelined second request that is relayed verbatim to t…","indicators":{"cves":["CVE-2026-88829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:57.077Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-88829","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531343","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-90954","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-90954 — A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred s…","description":"A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after the last member. A specially crafted .deb archive with two data.tar members can exploit this ordering…","indicators":{"cves":["CVE-2026-90954"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:57.297Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-90954","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533007","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103358","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103358 — Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template…","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4.","indicators":{"cves":["CVE-2026-103358"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:57.670Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/email-template-customizer-for-woo/vulnerability/wordpress-email-template-customizer-for-woocommerce-plugin-1-3-4-content-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103905","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103905 — The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode…","description":"The authentication middleware of the JTL-Shop\nadministration backend processes the plugin safe mode toggle on the admin\nlogout route before checking whether the requesting user is\nauthenticated. An unauthenticated remote attacker can therefore switch the shop's\nplugin safe mode on and off, which dea…","indicators":{"cves":["CVE-2026-103905"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:59.050Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.jtl-software.com/de/security/shop-maintenance-mode","label":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104795","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104795 — The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container…","description":"The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`)\nthat scans container processes for runtime fingerprinting. When scanning a\ncontainer, the coordinator:\n\n1. **fork()s** a child process\n2. **setns()** into the target container's PID and mount namespaces\n3. **fchdir()** b…","indicators":{"cves":["CVE-2026-104795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:59.937Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-104795","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543917","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107431","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107431 — Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting In…","description":"Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6.","indicators":{"cves":["CVE-2026-107431"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:02.763Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/jetformbuilder/vulnerability/wordpress-jetformbuilder-plugin-3-6-6-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73798","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73798 — A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service…","description":"A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.","indicators":{"cves":["CVE-2026-73798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T12:17:17.963Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76655","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76655 — A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution","description":"A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution","indicators":{"cves":["CVE-2026-76655"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T12:17:18.083Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106599","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106599 — Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object…","description":"Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.","indicators":{"cves":["CVE-2026-106599"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:22.503Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/surecart/vulnerability/wordpress-surecart-plugin-4-9-3-php-object-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107421","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107421 — Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-…","description":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.","indicators":{"cves":["CVE-2026-107421"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:23.183Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-broadcast-live-video-plugin-7-3-2-session-hijacking-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107426","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107426 — Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams…","description":"Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12.","indicators":{"cves":["CVE-2026-107426"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:23.773Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/ppv-live-webcams/vulnerability/wordpress-paid-videochat-turnkey-site-plugin-7-5-12-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-82026","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-82026 — Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSoc…","description":"Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check instead of role-based access control. Atta…","indicators":{"cves":["CVE-2026-82026"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:28.557Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://github.com/skyhook-io/radar/pull/1534","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/skyhook-io/radar/pull/1537","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/skyhook-io/radar/releases/tag/v1.12.2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/radar-missing-authorization-via-api-local-terminal","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97278","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97278 — Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injecti…","description":"Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9.","indicators":{"cves":["CVE-2026-97278"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:28.707Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/polylang/vulnerability/wordpress-polylang-plugin-3-8-9-php-object-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110690","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110690 — Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability…","description":"Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsewhere. Attackers can…","indicators":{"cves":["CVE-2026-110690"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:44.140Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://gist.github.com/mansurmavlankulov/5a0c4cbab8e49ac0669d126c854da95e","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coderaiser/cloudcmd/commit/91c024591f425e26200884d5e1d5ba972377968b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coderaiser/cloudcmd/releases/tag/v19.21.2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/cloud-commander-through-path-traversal-via-get-api-v1-pack","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98391","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98391 — In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Guard page-fault worker with runtime PM check\n\nDuring VM teardown, the VM's runtime PM reference is dropped\nasynchronously, allowing the device to autosuspend while stale page\nfaults belonging to the now-dead VM are still q…","indicators":{"cves":["CVE-2026-98391"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:49.980Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/20fce5b34b21a995839743b4917a1edd2fd503ba","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/25764620ec64c0142e2c87c41787f45540cf09ff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-71433","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2025-71433 — Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to…","description":"Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, for example from shared project links, ca…","indicators":{"cves":["CVE-2025-71433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:00.837Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/usekaneo/kaneo/blob/v2.1.5/apps/api/src/task/index.ts#L252-L275","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/usekaneo/kaneo/commit/6d3555e9c07ec7ce7f68477d669eec67fce33cc3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/usekaneo/kaneo/issues/521","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/usekaneo/kaneo/releases/tag/v2.1.6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/kaneo-before-2.1.6-missing-authorization-allows-cross-workspace-data-access","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/usekaneo/kaneo/issues/521","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104939","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104939 — Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy fo…","description":"Description\nNGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authenticati…","indicators":{"cves":["CVE-2026-104939"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:05.260Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162617","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110599","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110599 — L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_s…","description":"L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to lsmash_read_f…","indicators":{"cves":["CVE-2026-110599"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:11.247Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/l-smash/l-smash/blob/v2.14.5/importer/nalu_imp.c#L1356-L1378","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/l-smash/l-smash/blob/v2.14.5/importer/nalu_imp.c#L697-L715","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/l-smash-hevc-importer-double-free","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/l-smash-through-2.14.5-double-free-in-hevc-and-h-264-importer-probe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/cve-2016-20099-2026-110599-l-smash-hevc-importer-double-free","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110615","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110615 — jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus e…","description":"jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows authenticated low-privilege users to change other users' account status. Attackers can submit crafted ids and status values to disable every non-owner account in their tenant, lock…","indicators":{"cves":["CVE-2026-110615"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:13.607Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/jishenghua/jshERP","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jishenghua/jshERP/blob/v3.6/jshERP-boot/src/main/java/com/jsh/erp/controller/UserController.java#L541-L555","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jishenghua/jshERP/blob/v3.6/jshERP-boot/src/main/java/com/jsh/erp/service/UserService.java#L901-L946","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/jsherp-user-account-lifecycle-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/jsherp-through-3.6-missing-authorization-via-user-batchsetstatus","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110616","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110616 — NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticate…","description":"NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token field defaults to null and is never assigned. Attackers sending requests without Authorization or Origin headers to non-loopback…","indicators":{"cves":["CVE-2026-110616"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:13.767Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/nullclaw/nullhub","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nullclaw/nullhub/blob/v2026.5.29/Dockerfile#L69-L71","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nullclaw/nullhub/blob/v2026.5.29/src/api/settings.zig#L29-L54","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nullclaw/nullhub/blob/v2026.5.29/src/server.zig#L546-L556","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/rJrLma3izg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/nullhub-through-2026.5.29-missing-authentication-for-api-management-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/rJrLma3izg","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110618","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110618 — SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP ser…","description":"SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or overwrite…","indicators":{"cves":["CVE-2026-110618"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:14.053Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/pppscn/SmsForwarder","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pppscn/SmsForwarder/blob/v3.5.0/app/src/main/kotlin/cn/ppps/forwarder/server/component/AppMessageConverter.kt#L93-L96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pppscn/SmsForwarder/blob/v3.5.0/app/src/main/kotlin/cn/ppps/forwarder/utils/HttpServerUtils.kt#L35-L38","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/H1ue_ahiMe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/smsforwarder-through-3.5.0-missing-authentication-in-http-server-remote-control-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110621","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110621 — Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addPr…","description":"Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving them into their own organisation. Attackers can create an organisation and add a victim project by its public tracking ID t…","indicators":{"cves":["CVE-2026-110621"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:14.497Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/Swetrix/swetrix/blob/v5.0.3/backend/apps/cloud/src/project/project.controller.ts#L888-L920","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Swetrix/swetrix/commit/63eb76edcb446402ad1db5ff870920773f5ff588","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Swetrix/swetrix/issues/477","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Swetrix/swetrix/releases/tag/v5.1.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/swetrix-cloud-before-5.1.0-missing-authorization-via-post-project-organisation-orgid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110622","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110622 — Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticat…","description":"Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because page management and OCR endpoints skip has_node_perm checks. Attackers knowing page UUIDs can call /pages/, /pages/move, or /pages/extract to rotate,…","indicators":{"cves":["CVE-2026-110622","CVE-2026-110624"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:14.697Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/papermerge/papermerge-core/blob/3.5.3/papermerge/core/features/document/router_pages.py#L29-L131","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/blob/3.5.3/papermerge/core/features/tasks/router.py#L17-L35","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/commit/6ad2836dc40b61bd032146013272036bbece6144","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/issues/1290","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/papermerge-core-through-3.5.3-missing-authorization-in-page-management-and-ocr-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/papermerge/papermerge-core/blob/3.5.3/papermerge/core/features/document_types/router.py#L37-L62","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/blob/3.5.3/papermerge/core/features/tags/router.py#L39-L64","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/commit/0fd469102b05b5ebeb5ee39b3f73ff76991ab269","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/issues/1291","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/papermerge-core-through-3.5.3-missing-authorization-via-tags-all-and-document-types-all","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110623","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110623 — Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API…","description":"Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' documents by supplying arbitrary node UUIDs. Attackers can call POST /shared-nodes or PATCH /shared-nodes/access/{node_id} to grant themselves an…","indicators":{"cves":["CVE-2026-110623"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:14.833Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/papermerge/papermerge-core/blob/3.5.3/papermerge/core/features/shared_nodes/router.py#L78-L150","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/commit/0fd469102b05b5ebeb5ee39b3f73ff76991ab269","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/issues/1290","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermerge/papermerge-core/issues/1291","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/papermerge-core-through-3.5.3-missing-authorization-in-shared-nodes-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110628","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110628 — Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the…","description":"Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to fetch() to read internal services, localho…","indicators":{"cves":["CVE-2026-110628"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:15.540Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/kanbn/kan","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kanbn/kan/blob/v0.6.0/.env.example#L25-L27","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kanbn/kan/blob/v0.6.0/apps/web/src/pages/api/download/attatchment.ts#L21-L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kanbn/kan/commit/53397d8e81dc1494d94132848c1f0416f1152bd7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kanbn/kan/pull/590","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kanbn/kan/security/advisories/GHSA-qrx8-9hc6-jvqg","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/HyIxU63ofg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/kan-0.5.5-through-0.6.0-unauthenticated-ssrf-via-api-download-attatchment","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110632","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110632 — Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 t…","description":"Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module archives…","indicators":{"cves":["CVE-2026-110632"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:16.143Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://blog.quarkslab.com/myreport-updater-from-grpc-to-system.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.myreport.fr/myreport/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/report-one-myreport-updater-through-2.1.1-unauthenticated-grpc-service-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110633","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110633 — MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-p…","description":"MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories. Attackers can use UpdaterManager.exe over gRPC to set a malicious reference server and…","indicators":{"cves":["CVE-2026-110633"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:16.283Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://blog.quarkslab.com/myreport-updater-from-grpc-to-system.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.myreport.fr/myreport/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/myreport-updater-through-2.1.1-local-privilege-escalation-via-updater-service","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110637","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110637 — buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows…","description":"buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file name passed to kindlegen via child_process.exec. Attackers can craft a book project with a malicious front-matter filename or project fo…","indicators":{"cves":["CVE-2026-110637"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:16.853Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/wastemobile/buildebooks","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wastemobile/buildebooks/blob/7fc313485447d9359fb38fda3cbc2ed60ce69fe7/lib/kindle.js#L5-L12","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wastemobile/buildebooks/commit/123776c9ef61e8075ada2f7da2f7046f6a8078d9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wastemobile/buildebooks/pull/12","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/buildebooks-before-0.2.2-os-command-injection-via-kindlegen-epub-file-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110641","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110641 — @runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allo…","description":"@runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compress_file. Attackers who can name a file dropped into a watched directory can inject $() substitutions or unquoted shell…","indicators":{"cves":["CVE-2026-110641"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:17.437Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/runnerty/executor-decompress/blob/1a625bb84d24550df3b96deeaa6bd9da1c092131/index.js#L106","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/runnerty/executor-decompress/blob/1a625bb84d24550df3b96deeaa6bd9da1c092131/index.js#L26","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/runnerty/executor-decompress/pull/7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/runnerty-executor-decompress-through-3.1.1-os-command-injection-via-archive-file-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110642","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110642 — xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that al…","description":"xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS c…","indicators":{"cves":["CVE-2026-110642"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:17.627Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/xhtml2pdf/xhtml2pdf/blob/v0.2.18/xhtml2pdf/pisa.py#L393-L400","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xhtml2pdf/xhtml2pdf/commit/f86380dad15b3a6810201d08755a3ee6b19d5063","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xhtml2pdf/xhtml2pdf/pull/835","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xhtml2pdf/xhtml2pdf/releases/tag/v0.2.19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/xhtml2pdf-before-0.2.19-os-command-injection-via-startviewer-file-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110646","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110646 — Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows…","description":"Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL. Attackers can supply cmd.exe metacharacters such as & in the setUrl() value, which executeOnWindows() passes unescaped to PHP ex…","indicators":{"cves":["CVE-2026-110646"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:18.237Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/beganovich/snappdf/blob/v6.0.0/src/Snappdf.php#L280-L284","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/beganovich/snappdf/commit/5197bd3bcc4df44e17246dbceea9ce51eb390eae","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/beganovich/snappdf/pull/54","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/beganovich/snappdf/releases/tag/v6.1.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/beganovich-snappdf-1.1.0-before-6.1.0-os-command-injection-on-windows-via-seturl","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110647","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110647 — Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to exec…","description":"Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted names. The convertDocxToHtml function in src/converter.ts invokes pandoc through execa with shell:true, so shell metacharacters in the --docx p…","indicators":{"cves":["CVE-2026-110647"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:18.373Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/jinghaihan/turnpress/blob/v0.4.2/src/converter.ts#L33-L61","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jinghaihan/turnpress/pull/2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/turnpress-through-0.4.2-os-command-injection-via-crafted-docx-file-names","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110648","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110648 — @offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows at…","description":"@offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names. Font paths are interpolated unquoted into a FontForge command run through child_process.execSync, so shell metacharacters…","indicators":{"cves":["CVE-2026-110648"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:18.510Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/adamarcanov/compress-fonts/blob/7b07d20b3125a7bba8f933eeca21f5a09c8fb62a/index.js#L48","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/adamarcanov/compress-fonts/commit/12002e5866af2163cd34424baae5a53338951a5d","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/adamarcanov/compress-fonts/pull/1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/offactory-compress-fonts-before-1.1.1-os-command-injection-via-font-file-names","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15176","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-15176 — A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses t…","description":"A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $request_filename variable. Alternatively, the same result could be achieved when the $request_filename variable…","indicators":{"cves":["CVE-2026-15176"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:19.140Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162416","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-53612","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53612 — util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 thr…","description":"util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user autho…","indicators":{"cves":["CVE-2026-53612"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:20.260Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.41.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.42.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-53613","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53613 — util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 thr…","description":"util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pat…","indicators":{"cves":["CVE-2026-53613"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:20.410Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.41.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.42.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.42.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-66877","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-66877 — Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and di…","description":"Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement. A separate run sharing a job-level concurrency group can cancel a pending job and cause its blocked sibling jobs to be re-emitted and dispa…","indicators":{"cves":["CVE-2026-66877"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.863Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39005","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39018","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-v2w8-m4gr-qj65","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-71184","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-71184 — Gitea's pull request review notifier does not attach the pull request to the Actions notification, s…","description":"Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection events can consequently load workflow code from the fork head a…","indicators":{"cves":["CVE-2026-71184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.783Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39005","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39018","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-7w2r-xwp6-mh6c","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73535","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73535 — Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn…","description":"Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier. When OpenID sign-in is enabled, an attacker who knows the victim's password can obtain a session and link an attacker-controll…","indicators":{"cves":["CVE-2026-73535"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:23.517Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.2/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38805","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38810","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-8xjr-x7rg-hp5h","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73539","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73539 — Gitea substitutes a URL derived from the markup Context field into external renderer command templat…","description":"Gitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style argument splitting. A crafted Context can inject additional renderer arguments, including options that load executable filter files. On deploy…","indicators":{"cves":["CVE-2026-73539"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:23.633Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.2/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38885","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38898","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-579w-82gf-89m2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73800","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73800 — Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch wo…","description":"Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event. A fork author can modify a referenced reusable workflow so attacker-controlled code executes with the repository and organization secrets available to that…","indicators":{"cves":["CVE-2026-73800"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:24.560Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.2/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38886","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38897","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-r9ch-mqjm-g67v","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73802","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73802 — Gitea Runner passes workflow-controlled container options into Docker job container configuration wh…","description":"Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, and security profile overrides can remain effective despite Privileged being forced false. A workflow author able to ru…","indicators":{"cves":["CVE-2026-73802"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:24.670Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-runner-3.0.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://gitea.com/gitea/runner/releases/tag/v3.0.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-x4q3-gcj3-m6cf","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73804","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73804 — Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the…","description":"Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scope c…","indicators":{"cves":["CVE-2026-73804"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:24.777Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.2/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38862","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38895","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-q55v-4cmj-xh65","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-q55v-4cmj-xh65","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-91184","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-91184 — Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.…","description":"Description\n\nNGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic \"<realm>\";. A namespaced authenticated attacker that con…","indicators":{"cves":["CVE-2026-91184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:26.420Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162609","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93479","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-93479 — A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching…","description":"A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cac…","indicators":{"cves":["CVE-2026-93479"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:26.810Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162607","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-94197","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-94197 — An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Contr…","description":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and m…","indicators":{"cves":["CVE-2026-94197"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:26.963Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162611","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97205","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97205 — NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When async…","description":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes (SSI) page containing “include virtual” commands may trigger a Use-After-Free (UAF) in the NGINX worker p…","indicators":{"cves":["CVE-2026-97205"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:28.200Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162608","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102695","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102695 — OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.…","description":"OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, CombinedResourceHandler accepts a structurally valid deflated and base64 encoded combined resource ID without verifying that the server issued it. A forged ID can cause unbounded decode…","indicators":{"cves":["CVE-2026-102695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:29.840Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/omnifaces/omnifaces/releases/tag/1.14.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/omnifaces/omnifaces/releases/tag/2.7.33","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/omnifaces/omnifaces/releases/tag/3.14.23","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/omnifaces/omnifaces/releases/tag/4.7.12","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/omnifaces/omnifaces/releases/tag/5.4.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103929","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103929 — mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default n…","description":"mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project before trust approval and strip_local_only_settings removes only fields marked global_only. The unix_default_file_shell_a…","indicators":{"cves":["CVE-2026-103929"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:30.577Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/jdx/mise/commit/c6cd7a9a2ca580918562566126646e5d04317895","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jdx/mise/pull/11293","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jdx/mise/releases/tag/v2026.7.14","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110719","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110719 — Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that a…","description":"Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Attackers can send /v1 requests wi…","indicators":{"cves":["CVE-2026-110719"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:44.183Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/Portkey-AI/gateway","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Portkey-AI/gateway/blob/ca7712947ec8c0887803990b746740d36011c697/src/middlewares/requestValidator/index.ts#L289","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/BJypv-aiMg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/portkey-ai-gateway-1.14.0-through-1.15.2-ssrf-via-x-portkey-custom-host-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53614","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53614 — util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 t…","description":"util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy…","indicators":{"cves":["CVE-2026-53614"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:45.930Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.41.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.42.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-53615","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53615 — util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended(…","description":"util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker…","indicators":{"cves":["CVE-2026-53615"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:46.070Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/releases/tag/v2.41.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87093","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87093 — Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. Thi…","description":"Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer.\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-87093"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:54.780Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89067","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89067 — Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.…","description":"Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89067"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:54.897Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89068","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89068 — Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). Thi…","description":"Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89068"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:55.017Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89070","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89070 — Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). Thi…","description":"Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89070"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:55.270Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89071","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89071 — Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability i…","description":"Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89071"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:55.383Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89072","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89072 — Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This…","description":"Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module).\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89072"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:55.500Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89073","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89073 — Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit…","description":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89073"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:55.630Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89074","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89074 — Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects…","description":"Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer.\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89074"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:55.743Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89075","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89075 — Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affe…","description":"Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer.\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89075"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:55.853Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89077","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89077 — Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP…","description":"Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module).\n\nThis issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","indicators":{"cves":["CVE-2026-89077"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:56.080Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://community.progress.com/s/article/MOVEit-Transfer-Critical-Security-Bulletin---September-2026","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91156","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-91156 — Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9…","description":"Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, MessageBus audience calculation could deliver messages from a read-restricted category chat channel to an authenticated user who could view the category but was not allowed to use Chat under the sit…","indicators":{"cves":["CVE-2026-91156","CVE-2026-91157","CVE-2026-91159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:56.310Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/discourse/discourse/commit/046fb7bfd68a5b95e63dda88c3c73877c5cf9d5e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/87b31bf60a7827f075634254379a1dcbaba409cb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/ba74bb404ab4439f5b1f0204e848d62099db8ae1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/cac1f26f275cec3dc1dd51dfdac2b3d1a4ec50f8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/security/advisories/GHSA-gh4f-qr62-vx8q","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/16017732981fdb3ee65d7b3c69c573610bf02aab","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/83f5f9f1df7ddc79ec0950e1b2038ba659635708","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/98f1c021d0e956cded5239a5d8a6afe2b9e1b7e7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/b2fb98394b2636b29e850f06b0029f8ca8b48458","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/security/advisories/GHSA-298h-xgw6-4pv3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/0953b31f5c2949d7d6ab5f6dc4c5e2f1b8bf0b22","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/3fc2bad6cdca47b00958330d1ee612aa141b039a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/dde8bc4fb6200139f5eff7e100b0f3e829d37ab3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/commit/ed6f83f123d1a4c6c6c7e64c8a2233e3cb6a28d7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse/security/advisories/GHSA-f9jx-vv33-4282","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-91882","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-91882 — Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive In…","description":"Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerabi…","indicators":{"cves":["CVE-2026-91882","CVE-2026-91883"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:56.880Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000515444/dsa-2026-434-security-update-for-dell-terraform-provider-for-dell-server-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100236","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100236 — A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, i…","description":"A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A r…","indicators":{"cves":["CVE-2026-100236"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:44.833Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-100236","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541488","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101927","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101927 — A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolv…","description":"A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker to cause a denial of service (DoS) or achieve privilege escalation to root via crafted IPC event messages.","indicators":{"cves":["CVE-2026-101927"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:45.583Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101939","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101939 — A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Ju…","description":"A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with `then source-based-forwarding next-hop next-table <X>` is configured t…","indicators":{"cves":["CVE-2026-101939","CVE-2026-101941","CVE-2026-101948","CVE-2026-101977","CVE-2026-101988","CVE-2026-102021","CVE-2026-102028","CVE-2026-102029","CVE-2026-101949"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:46.387Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101940","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101940 — A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and…","description":"A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled.","indicators":{"cves":["CVE-2026-101940","CVE-2026-102040"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:46.543Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101942","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101942 — An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon…","description":"An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received from…","indicators":{"cves":["CVE-2026-101942","CVE-2026-101991","CVE-2026-101962"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:46.930Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101943","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101943 — An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks…","description":"An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.","indicators":{"cves":["CVE-2026-101943"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:47.090Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101944","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101944 — An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Netw…","description":"An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.","indicators":{"cves":["CVE-2026-101944","CVE-2026-101972"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:47.247Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101945","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101945 — An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and…","description":"An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing instances…","indicators":{"cves":["CVE-2026-101945"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:47.410Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101951","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101951 — An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd…","description":"An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent configured BGP peer to cause a denial of service by sending a specifically malformed BGP MCAST-TREE update and this NLRI i…","indicators":{"cves":["CVE-2026-101951","CVE-2026-101952"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:48.030Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101955","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101955 — A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on…","description":"A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled.","indicators":{"cves":["CVE-2026-101955"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:48.200Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101957","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101957 — An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju…","description":"An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause an rpd crash via an LLGR-stale route update readvertised to a configured non-LLGR peer group.","indicators":{"cves":["CVE-2026-101957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:48.493Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101960","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101960 — An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos…","description":"An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for BGP global-load-balancing and more than 128 ecmp next-hops allows an attacker to cause an rpd crash.","indicators":{"cves":["CVE-2026-101960","CVE-2026-102177","CVE-2026-102179","CVE-2026-103993","CVE-2026-101976"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:48.657Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"},{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101965","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101965 — An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks J…","description":"An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service…","indicators":{"cves":["CVE-2026-101965"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:48.803Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101966","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101966 — A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks J…","description":"A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.","indicators":{"cves":["CVE-2026-101966"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:48.943Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101967","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101967 — An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networ…","description":"An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response.","indicators":{"cves":["CVE-2026-101967","CVE-2026-101978"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:49.100Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101973","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101973 — A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows a…","description":"A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment.","indicators":{"cves":["CVE-2026-101973"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:49.900Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101984","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101984 — A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos O…","description":"A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent BGP peer to cause a denial of service when labeled-unicast aggregate-label is configured.","indicators":{"cves":["CVE-2026-101984","CVE-2026-101989","CVE-2026-101993","CVE-2026-102022","CVE-2026-102063","CVE-2026-102064","CVE-2026-102071","CVE-2026-101964","CVE-2026-101975"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:50.650Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"},{"url":"https://supportportal.juniper.net/JSA112196","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101994","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101994 — An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper…","description":"An Improper Handling of Length Parameter Inconsistency vulnerability in the \n\nl2ald \n\ndaemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed…","indicators":{"cves":["CVE-2026-101994"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:52.233Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102012","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102012 — A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved all…","description":"A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.","indicators":{"cves":["CVE-2026-102012"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:53.370Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102014","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102014 — A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows…","description":"A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response.","indicators":{"cves":["CVE-2026-102014"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:53.693Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102015","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102015 — A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos…","description":"A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface.","indicators":{"cves":["CVE-2026-102015"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:53.993Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102016","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102016 — An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Ne…","description":"An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause a denial of service via a BGP MVPN signaling update.","indicators":{"cves":["CVE-2026-102016","CVE-2026-102019"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:54.170Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102020","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102020 — A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evo…","description":"A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates.","indicators":{"cves":["CVE-2026-102020","CVE-2026-102042","CVE-2026-102044"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:54.873Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102023","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102023 — A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authe…","description":"A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall counter is configured.","indicators":{"cves":["CVE-2026-102023"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:55.320Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102024","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102024 — An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Juno…","description":"An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of service via BGP route updates when extended-nexthop-tunnel is enabled.","indicators":{"cves":["CVE-2026-102024"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:55.463Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102025","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102025 — A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process o…","description":"A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via a BGP route update when extended next-hop tunneling and SRv6 service pr…","indicators":{"cves":["CVE-2026-102025"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:55.627Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102026","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102026 — An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon…","description":"An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled.","indicators":{"cves":["CVE-2026-102026"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:55.793Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102027","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102027 — An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Junipe…","description":"An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP neighbor to cause an rpd crash via BGP labeled-unicast UPDATEs when the affected multipath features are enabled.","indicators":{"cves":["CVE-2026-102027"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:55.973Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102030","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102030 — An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evo…","description":"An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor to cause a denial of service via a BGP MVPN update when an inter‑region segmented VRF with 'protocols mvpn inter-region-template' is configured.","indicators":{"cves":["CVE-2026-102030"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:56.460Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102036","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102036 — An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS an…","description":"An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes.","indicators":{"cves":["CVE-2026-102036"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:57.717Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102037","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102037 — An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Ju…","description":"An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with root privileges via a malicious response from a configured custom URL-feed server.","indicators":{"cves":["CVE-2026-102037"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:57.867Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102043","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102043 — A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos O…","description":"A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via MPLS-TE fast-reroute signaling.","indicators":{"cves":["CVE-2026-102043","CVE-2026-33795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:58.640Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102046","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102046 — A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsctp.ko of Juniper Netw…","description":"A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic.","indicators":{"cves":["CVE-2026-102046"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:59.093Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112196","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102049","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102049 — A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Ju…","description":"A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service or execute arbitrary code with root privileges via LLDP traffic received on an interface with Unified Access Pol…","indicators":{"cves":["CVE-2026-102049"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:59.560Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102050","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102050 — A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Jun…","description":"A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated trigg…","indicators":{"cves":["CVE-2026-102050"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:59.737Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102052","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102052 — A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and J…","description":"A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a malformed DHCPv4 server response when the DHCPv4 l…","indicators":{"cves":["CVE-2026-102052"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:00.113Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102055","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102055 — A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX S…","description":"A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent to a…","indicators":{"cves":["CVE-2026-102055"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:00.590Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102056","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102056 — An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Ev…","description":"An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent-network attacker to crash the daemon and disclose limited process memory via a specific CFM Message sent to a configured interface.","indicators":{"cves":["CVE-2026-102056"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:00.753Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102057","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102057 — A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allow…","description":"A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and zero-touch-provisioni…","indicators":{"cves":["CVE-2026-102057"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:00.937Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102059","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102059 — An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…","description":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary comm…","indicators":{"cves":["CVE-2026-102059"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:01.253Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102061","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102061 — A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Juno…","description":"A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message.\n\nThis issue only affects platforms that support Secur…","indicators":{"cves":["CVE-2026-102061"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:01.580Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102062","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102062 — An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks J…","description":"An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.","indicators":{"cves":["CVE-2026-102062"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:01.737Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102065","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102065 — An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (…","description":"An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enab…","indicators":{"cves":["CVE-2026-102065","CVE-2026-102067","CVE-2026-102183","CVE-2026-102184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:02.173Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102068","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102068 — A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allow…","description":"A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP.","indicators":{"cves":["CVE-2026-102068"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:02.647Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102069","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102069 — A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices…","description":"A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is trigge…","indicators":{"cves":["CVE-2026-102069"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:02.800Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102070","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102070 — A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Jun…","description":"A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet.","indicators":{"cves":["CVE-2026-102070"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:02.953Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102079","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102079 — An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low pr…","description":"An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.\n\nA specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended com…","indicators":{"cves":["CVE-2026-102079"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:03.560Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112180","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102081","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102081 — A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (…","description":"A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS).\n\n\n\nOn SRX4000 Series, and SRX5000 Series with SPC3, and M…","indicators":{"cves":["CVE-2026-102081"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:03.863Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112177","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102084","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102084 — An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper…","description":"An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device.\n\nIf an SRX device configured for AutoDiscovery VPN (ADVPN) receives a message fr…","indicators":{"cves":["CVE-2026-102084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:04.310Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112173","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102174","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102174 — A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Network…","description":"A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of service via the remote-access VPN authentication and JIMS identity…","indicators":{"cves":["CVE-2026-102174"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:04.990Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102176","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102176 — A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK se…","description":"A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and…","indicators":{"cves":["CVE-2026-102176"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:05.303Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102185","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102185 — A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemo…","description":"A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election.","indicators":{"cves":["CVE-2026-102185"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:06.547Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103946","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103946 — An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Ne…","description":"An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.","indicators":{"cves":["CVE-2026-103946"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:13.303Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://www.tenable.com/security/tns-2026-26","label":"vulnreport@tenable.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103994","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103994 — A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Jun…","description":"A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution.","indicators":{"cves":["CVE-2026-103994"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:13.613Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-15102","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-15102 — ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. E…","description":"ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.","indicators":{"cves":["CVE-2026-15102"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:26.670Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://www.autodesk.com/products/autodesk-access/overview","label":"psirt@autodesk.com","domainType":"other"},{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0017","label":"psirt@autodesk.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19673","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-19673 — ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a rece…","description":"ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr. When the ethertype is 0x8100 and VLAN is enabled on the interface, the same buffer is reinterpreted as the 18-byte struct net_eth_vlan_hdr without…","indicators":{"cves":["CVE-2026-19673"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:26.800Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/fd3c6fedf6b639977a80e52b680b15672c31f3ef","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-79rf-rwff-f4vg","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-33798","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-33798 — A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS…","description":"A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic.","indicators":{"cves":["CVE-2026-33798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:28.477Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-86562","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86562 — A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap…","description":"A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler.","indicators":{"cves":["CVE-2026-86562"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:05.420Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86562","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529667","label":"secalert@redhat.com","domainType":"other"},{"url":"https://git.dpdk.org/dpdk/commit/?id=6ec17781346e0fe4b566b6bf8f79be71f87c10e4","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86563","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86563 — A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to…","description":"A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access.","indicators":{"cves":["CVE-2026-86563"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:05.600Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86563","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529668","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86565","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86565 — A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descripto…","description":"A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.","indicators":{"cves":["CVE-2026-86565"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:05.770Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86565","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529683","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92151","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92151 — F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde…","description":"F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::Ccsds::SpacePacketDeframer dataIn_handler is vulnerable because the handler treats the minimum packet-length condition as FW_ASSERT rather than rejecting…","indicators":{"cves":["CVE-2026-92151","CVE-2026-92153","CVE-2026-92150","CVE-2026-92152","CVE-2026-92154","CVE-2026-92155","CVE-2026-92156","CVE-2026-92157","CVE-2026-92158","CVE-2026-92159","CVE-2026-92160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:20.997Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/nasa/fprime/commit/cacdd555456bd83ab395b521d56c0330470ea798","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/pull/4919","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/releases/tag/v4.2.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-4rjh-jqvx-r8j5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/commit/4c8b9c0b8692b0d47cbd5f2ccec61c74aa02b893","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/pull/5320","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/releases/tag/v4.3.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-5rfj-hw2g-vwmv","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/commit/b56b53634fd4251ae84919f22dcff829ef9e0986","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/pull/4929","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-2mh6-f7jj-6c93","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-vv4x-5pmf-m59g","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-wx8q-q5gx-f54p","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-3534-8qg7-6cf5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/commit/7eacd551aaf6d9a21e347ac2c8d827ca15ee5755","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/pull/5633","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-6fxx-mgfv-55g7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/commit/33fe2a4fe3fd5ff1b14985669fbad09f070e9914","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/commit/95eeb5cfb44e5609eff0887f0e11e640cdacef6b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/pull/5565","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-hcmw-g425-8h9g","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/commit/7527430d9ae7c88f3d649d376a45c866b0aed595","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/pull/4534","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-vfwv-3qv7-jjjq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/commit/048fe04062b91be7af138df7e09cdd15812dde96","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/pull/4878","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/releases/tag/v4.3.0a1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-grrq-8rmr-xf83","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nasa/fprime/security/advisories/GHSA-8r3j-ghrh-55mw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101961","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101961 — A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Netwo…","description":"A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP impor…","indicators":{"cves":["CVE-2026-101961"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:11.610Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101963","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101963 — An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Juno…","description":"An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured.","indicators":{"cves":["CVE-2026-101963"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:11.970Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101979","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101979 — A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evol…","description":"A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP packet, when SNMP and AAA are enabled.","indicators":{"cves":["CVE-2026-101979"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:12.803Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102077","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102077 — An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engin…","description":"An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\n\n\nOn MX Series with SPC3 line-card and source NAT con…","indicators":{"cves":["CVE-2026-102077"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:13.460Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://supportportal.juniper.net/JSA112182","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103081","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103081 — Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boo…","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a through 1.3.0.","indicators":{"cves":["CVE-2026-103081"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:19.103Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/woo-boost-sales/vulnerability/wordpress-salevo-plugin-1-3-0-content-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104103","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104103 — Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior…","description":"Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() validated tar member names before calling TarFile.extractall() but did not validate symlink members or hard-link members. A crafted archive could…","indicators":{"cves":["CVE-2026-104103"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:21.540Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/ludwig-ai/ludwig/commit/7f534f31e725cc5362c8f6f85537488443de279a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ludwig-ai/ludwig/releases/tag/v0.17.8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ludwig-ai/ludwig/security/advisories/GHSA-qvrm-3x4c-rcxf","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107349","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107349 — An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cau…","description":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as \"-c=\", makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves…","indicators":{"cves":["CVE-2026-107349"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:25.557Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://www.pgbouncer.org/changelog.html","label":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107350","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107350 — Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the pa…","description":"Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authe…","indicators":{"cves":["CVE-2026-107350"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:25.670Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://www.pgbouncer.org/changelog.html","label":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108395","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108395 — The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and…","description":"The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from mcp-cor…","indicators":{"cves":["CVE-2026-108395"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:27.370Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/1499df22c7023aa257223143a5dcf5b1db7ef80d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/6a41dedaa0625551582d8247e5a4d78eae1131b2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/8c0fdd1b1f76adba3ce7945d29f73fa2ddc66598","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/java-sdk/commit/9e4d5fa827b6ba69457f5fd93573184789528efa","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v0.18.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v1.1.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/java-sdk/releases/tag/v2.0.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/java-sdk/security/advisories/GHSA-4x8c-5vv7-973f","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108480","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108480 — Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Conf…","description":"Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Skydropx: from n/a through 2.1.4.","indicators":{"cves":["CVE-2026-108480"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:29.393Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/skydropx/vulnerability/wordpress-skydropx-plugin-2-1-4-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109527","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109527 — The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers…","description":"The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP request…","indicators":{"cves":["CVE-2026-109527"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:33.447Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/03aaebd3aadb2567878dd811cb1f141454e8a080","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/4dc224fab201bdef2fd5a065976b7ca31420187c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/57394b0548d1e2dc2dce8d67d84985769df3b8bb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/5f0b6af9f2b0aad3be3ba5cbfe80a9e4ea32e189","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.29.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.1.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-fmmv-w9g8-j3gc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-54554","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-54554 — FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.…","description":"FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo() endpoint in packages/web/lib/fog/fogpage.class.php was reported to return the FOG_AD_DEFAULT_PASSWORD value in its domainpass JSON field and to be dispatchable through no…","indicators":{"cves":["CVE-2026-54554"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:37.693Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/FOGProject/fogproject/commit/26f37fbbc7106aa99c792dbac871a5accf86ab37","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOGProject/fogproject/commit/3b40a794c67ad765dd02aee8e363edd5ee047630","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOGProject/fogproject/commit/f5e00d80707167975f95e5af1cfd8b7efda14dd8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOGProject/fogproject/releases/tag/1.5.10.1870","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOGProject/fogproject/security/advisories/GHSA-q9gc-h2qc-qmx8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOGProject/fogproject/security/advisories/GHSA-q9gc-h2qc-qmx8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-79957","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79957 — ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endp…","description":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the I…","indicators":{"cves":["CVE-2026-79957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:18:19.133Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://blog.blacklanternsecurity.com/p/cve-2026-79957-insecure-direct-object","label":"cves@blacklanternsecurity.com","domainType":"other"},{"url":"https://blog.blacklanternsecurity.com/p/cve-2026-79957-insecure-direct-object","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86461","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86461 — The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload i…","description":"The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the check_mimetype function. This is due to incomplete file type validation in the check_mimetype function — while some extension checking is prese…","indicators":{"cves":["CVE-2026-86461"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:17.623Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/fv-wordpress-flowplayer/trunk/models/checker.php?rev=3652655#L107","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3731114/fv-wordpress-flowplayer","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3dacc612-5300-497a-9d6a-0944906e180c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86567","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86567 — A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IO…","description":"A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap.","indicators":{"cves":["CVE-2026-86567"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:18.390Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86567","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529685","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86848","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86848 — A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a g…","description":"A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend.","indicators":{"cves":["CVE-2026-86848"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:19.223Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86848","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529853","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102944","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102944 — cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() remov…","description":"cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() removes Host, Proxy-Authorization, and Authorization headers when following a cross-origin 301, 302, 307, or 308 redirect but leaves Cookie headers attached. detail::redirect() copies the request for those…","indicators":{"cves":["CVE-2026-102944"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:06.347Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/yhirose/cpp-httplib/commit/0c1cc8c9866bb567ff11c1cd0d09779e8c5f8585","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/yhirose/cpp-httplib/releases/tag/v0.51.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-22mf-w2v3-r2jv","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-22mf-w2v3-r2jv","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110667","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110667 — A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an u…","description":"A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument SECRET_KEY results in hard-coded credentials. The attack can be executed remotely. The project was informed of the proble…","indicators":{"cves":["CVE-2026-110667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:11.550Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cemtan/sar2html/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/cemtan/sar2html/issues/19","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110667","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003761","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419827","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419827/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110761","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110761 — ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authent…","description":"ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tst_sequence sequence attribute that is passed to unse…","indicators":{"cves":["CVE-2026-110761"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:11.723Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://docu.ilias.de/go/blog/15821/952","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=228077&ref_id=35","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/ILIAS-eLearning/ILIAS","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ILIAS-eLearning/ILIAS/blob/2a3758ee3b01e5c66922e08f58a2189146b884d4/components/ILIAS/Test/classes/class.ilObjTest.php#L7364","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ILIAS-eLearning/ILIAS/blob/2a3758ee3b01e5c66922e08f58a2189146b884d4/components/ILIAS/Test/classes/class.ilTestResultsImportParser.php#L225","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ILIAS-eLearning/ILIAS/commit/267d4645ea940f8f97d1a9838deff6a12097564d","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ILIAS-eLearning/ILIAS/commit/ac4684239641fb3dab2d636b53a61c46462d1208","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ILIAS-eLearning/ILIAS/commit/cf4e9c230edfd96fc94a1b1d355500aa8c6f1771","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ilias-before-9.24-10.12-and-11.5-php-object-injection-via-test-results-import","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110767","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110767 — Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob…","description":"Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and submit its blob URL, causing the server…","indicators":{"cves":["CVE-2026-110767"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:12.610Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/coderamp-labs/gitingest","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coderamp-labs/gitingest/blob/4e259a02fe72115bee538271622f1234a81c8e1a/src/gitingest/ingestion.py#L75","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/gitingest-blob-symlink-arbitrary-file-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/gitingest-through-0.3.1-arbitrary-file-read-via-symlink-in-blob-ingestion","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110769","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110769 — holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connecto…","description":"holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #isAllowed check accepts all senders when the default allowFrom list is empty. Attackers who can message the operator's Tel…","indicators":{"cves":["CVE-2026-110769"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:12.940Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/holaboss-ai/holaOS","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/holaboss-ai/holaOS/blob/4684714ee133794cdbb86630e42b7d93447fb2e2/runtime/channel-gateway/src/connectors/telegram.ts#L488","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/holaos-channel-gateway-allow-all-sender-default","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/holaos-through-2026.822.1-missing-authorization-in-channel-gateway-connectors","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110770","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110770 — Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthent…","description":"Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/reset-password. Attackers can request a six-digit code for a known email, then guess it without rate limiting, lockout, or i…","indicators":{"cves":["CVE-2026-110770"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:13.077Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/databasus/databasus","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/databasus/databasus/blob/9ee25ed8f47b1b537468417e1bb52ed2d76218a0/backend/internal/features/users/services/user_services.go#L637","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/databasus-password-reset-code-brute-force","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/databasus-3.7.0-through-3.61.0-account-takeover-via-password-reset-brute-force","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53999","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53999 — Radius is a cloud-native, portable application platform that makes app development easier for teams…","description":"Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps. Prior to 0.58.0, the Kubernetes controller deserializes the user-controlled radapp.io/status annotation on a Deployment and uses its container resource identifier for delet…","indicators":{"cves":["CVE-2026-53999"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:17.340Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/radius-project/radius/commit/c4174fc205b838d5eab4f64b4909001ab08c0587","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/radius-project/radius/pull/11967","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/radius-project/radius/releases/tag/v0.58.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/radius-project/radius/security/advisories/GHSA-fp5j-4fj2-4jvq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/radius-project/radius/security/advisories/GHSA-fp5j-4fj2-4jvq","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-54525","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-54525 — Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, M…","description":"Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-controlled link target to a Windows file-opening helper that invokes child_process.exec with the start command. When a Windows…","indicators":{"cves":["CVE-2026-54525"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:17.480Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/shd101wyy/crossnote/commit/5588ca2121c3da43fe331575dc5cf4ef347b91ee","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/crossnote/pull/442","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/crossnote/releases/tag/0.9.29","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/commit/dcd80281c986293b93d9f1af34ced64dcb230c77","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/pull/2318","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/releases/tag/0.8.28","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/security/advisories/GHSA-7v6f-3vq6-r373","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55786","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55786 — Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4,…","description":"Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requests and forwards execute_module arguments to the module registry without the require_auth dependency used by the REST exec…","indicators":{"cves":["CVE-2026-55786"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:17.777Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/flytohub/flyto-core/commit/db7f116b1d3c5dcf94aded00d14118f81f3e225e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/flytohub/flyto-core/releases/tag/v2.26.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/flytohub/flyto-core/security/advisories/GHSA-h9f9-h6gm-wc85","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55787","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55787 — Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_…","description":"Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_url_ssrf and is_private_ip in src/core/utils.py compare resolved addresses only against native private IPv4 and IPv6 ranges and do not unwrap IPv4-mapped, IPv4-compatible, 6to4, or NAT64 transition ad…","indicators":{"cves":["CVE-2026-55787"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:17.927Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/flytohub/flyto-core/commit/519e040384a74984848c4e84a6600e5f1020a6d2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/flytohub/flyto-core/pull/20","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/flytohub/flyto-core/releases/tag/v2.26.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63626","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63626 — Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2…","description":"Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2_ppp.c trusts the 16-bit IPv6CP len field without checking it against the received payload size. On a PPP or PPPoE link using MG_ENABLE_TCPIP and MG_ENABLE_IPV6, an unauthenticated adjacent peer can c…","indicators":{"cves":["CVE-2026-63626"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:18.570Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cesanta/mongoose/commit/751f14742dea934bec08a507ab1fecc3673d4903","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/releases/tag/7.23","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/security/advisories/GHSA-pc66-j6r6-49x9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73252","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73252 — Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack select…","description":"Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MG_TLS_BUILTIN in src/tls_builtin.c accepts a TLS 1.3 record whose decrypted size is exactly the 16-byte authentication tag with no plaintext or ContentType byte. In mg_tls_recv_record(), the ms…","indicators":{"cves":["CVE-2026-73252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:19.667Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cesanta/mongoose/commit/758e301f0c9a9885c1b716195df5fe6d6ac9d53e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/releases/tag/7.23","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/security/advisories/GHSA-hq58-98f5-2wg3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/security/advisories/GHSA-hq58-98f5-2wg3","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73260","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73260 — Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate…","description":"Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate parser selected by MG_TLS_BUILTIN fails to verify that a long-form DER element length fits within the remaining certificate buffer. In mg_der_to_tlv() and mg_der_next(), a peer-controlled length can a…","indicators":{"cves":["CVE-2026-73260"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:19.840Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cesanta/mongoose/commit/a8b4ae95db3c2db85e5ad9db3fefaeebb5f7b43e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/releases/tag/7.23","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/security/advisories/GHSA-f6wr-mg35-p25g","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73261","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73261 — Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack ena…","description":"Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TCPIP in src/net_builtin.c does not reject a TCP option whose declared opts[1] length exceeds the remaining option bytes. In handle_opt(), a NOP followed by a truncated MSS option ca…","indicators":{"cves":["CVE-2026-73261"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:19.990Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cesanta/mongoose/commit/cc7c6d2d18c28fcc6d085633dddd88402946140a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/releases/tag/7.23","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/cesanta/mongoose/security/advisories/GHSA-3fmr-92g4-wchx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102986","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102986 — Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the pu…","description":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a p…","indicators":{"cves":["CVE-2026-102986"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:28.907Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/makeplane/plane/commit/4577dc3f7a6b5a198602b602a45c6b0abdc7204b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/pull/9288","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/releases/tag/v1.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-8688-h9x2-v83m","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-8688-h9x2-v83m","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110668","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110668 — A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function inde…","description":"A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argument sort causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could b…","indicators":{"cves":["CVE-2026-110668"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:30.997Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cemtan/sar2html/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/cemtan/sar2html/issues/20","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110668","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003762","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419828","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419828/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55381","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55381 — InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe…","description":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POST /api/v1/estimates/{estimate}/convert-to-invoice in ConvertEstimateController authorizes only the caller's create-invoice ability and does n…","indicators":{"cves":["CVE-2026-55381","CVE-2026-55382","CVE-2026-55383","CVE-2026-55384","CVE-2026-55385","CVE-2026-55386","CVE-2026-55387"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:48.057Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/InvoiceShelf/InvoiceShelf/commit/e432e4e62f5aa52238e3ff3fc37a0c78588eec47","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/pull/661","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/releases/tag/2.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-j2vg-rxqr-5vc9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-85wc-38p4-2wqq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/commit/5839d8385debf379644f55e773639e1c7e673163","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/pull/662","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-73q7-2953-8gvx","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/commit/107a951126b606880a8f4838a88cdff707ee619b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/pull/665","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-8c69-ch98-87r6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/commit/d615cfb4ff4841a3b8cda7fc850a2bb335521fe5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/pull/664","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-mfxg-qphw-3f3g","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/commit/e92b08ef6af7d0d0cd5183df81f795f7fbf4f4fc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/pull/663","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-cp8p-jcqf-j39c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-wxrv-73x6-8r62","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55498","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55498 — FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operatio…","description":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links with subfolder browsing enabled can follow a symbolic link inside the shared folder to a sibling directory under the upload root. An unauthenti…","indicators":{"cves":["CVE-2026-55498","CVE-2026-103977","CVE-2026-103988","CVE-2026-104105","CVE-2026-104106","CVE-2026-104107","CVE-2026-104108","CVE-2026-104109","CVE-2026-104110","CVE-2026-57489","CVE-2026-57490","CVE-2026-57491","CVE-2026-57492","CVE-2026-57493","CVE-2026-61843","CVE-2026-61844","CVE-2026-62664","CVE-2026-64856","CVE-2026-69191","CVE-2026-69193","CVE-2026-69194","CVE-2026-77427"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:49.050Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/error311/FileRise/commit/f24af3f2a25cec092d19de93acbc215e74659a22","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.15.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-83rw-5ffw-p798","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/cc1118923b522baff28dca05bdd79c27f984c68a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.23.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-4hfj-6478-5cv7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-hhc9-q8vh-95p8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-9pg4-98cx-r82j","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-77m8-hm3q-mrr5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-67p9-5q8f-586q","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-c5c5-mv9m-j367","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-jp22-hh6w-mpwp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/1bf1f44d221398dcf6484520d0905e1f4bf319c7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.24.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/f7114ca2a4e624238dda0d097a07ad6b05c11bb6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.16.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-98pg-w3jp-r8fv","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-cx7g-xhj8-8cx3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-c4g2-8fg6-5xrr","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-g555-3rg9-wrq8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-r55g-3hcc-6jx7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/9ed1a38f00918849dbda30f54291d1451ed80d11","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.18.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-r787-5hp3-4874","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-qpm8-pgmq-wxmh","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/3bd5144b4bfdd03f059de18a4d106c235cf70685","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.19.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-p7vh-cjpm-rmrq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/8c0875bf8f7fd5c6769f4159b999bf08a9d4f0c9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.20.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-p4c7-8jm2-m88q","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/613fdb28ca25e6dcc9bdfa590757b53935fad8da","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.21.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-p9qc-2r93-jccq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-5m63-83jf-gwx8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-rmwm-wq9g-583g","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/commit/b5213b66d4c668a45f1b7600aa62b79cb66ddbe6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/releases/tag/v3.22.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/error311/FileRise/security/advisories/GHSA-g6p5-9cpq-mp5h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55681","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55681 — WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with acces…","description":"WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit id_produto to web/html/matPat/restaurar_produto_desocultar.php, where a second extract($_REQUEST) overwrites the value previously sanitized by intval()…","indicators":{"cves":["CVE-2026-55681"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:50.343Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/8fa3dfcd71c2058c3b6127fdb40d3f1ec068be3e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/99","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9q8x-jqpj-23xp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9q8x-jqpj-23xp","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55682","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55682 — WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/segu…","description":"WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/seguranca/sessionStart.php reflects an attacker-supplied PHPSESSID cookie in a Set-Cookie response and uses DB_HOST as the cookie domain. If a victim authenticates while using the attacker-selected identi…","indicators":{"cves":["CVE-2026-55682"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:50.487Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/f59cad3ac7292225e88699cac82775a9f534be05","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/221","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5xhr-jrv8-j4j2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5xhr-jrv8-j4j2","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100232","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100232 — Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command I…","description":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute ar…","indicators":{"cves":["CVE-2026-100232"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:20.577Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018","label":"PSIRT@sonicwall.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110670","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110670 — A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of…","description":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the proble…","indicators":{"cves":["CVE-2026-110670"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:36.077Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/cemtan/sar2html/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/cemtan/sar2html/issues/22","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110670","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003778","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419833","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419833/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110679","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110679 — A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function r…","description":"A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resolv…","indicators":{"cves":["CVE-2026-110679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:36.253Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/OpenSIPS/opensips/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/OpenSIPS/opensips/releases/tag/4.0.2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qv9x-v8jq-434w","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110679","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003897","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419834","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419834/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-71854","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-71854 — OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber advers…","description":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the `/api/player/**` lessons endpoints can be called without authentication, and they trust a client-supplied…","indicators":{"cves":["CVE-2026-71854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:39.177Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-47wr-wp4h-8v3f","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96540","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96540 — An improper access control vulnerability has been identified in the SonicWall Network Security Manag…","description":"An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to…","indicators":{"cves":["CVE-2026-96540"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:39.603Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0018","label":"PSIRT@sonicwall.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110696","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110696 — A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999b…","description":"A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is an unknown function of the file dbtables.sql. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The explo…","indicators":{"cves":["CVE-2026-110696","CVE-2026-111871"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:22.870Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/itsmeravitejak/Online-Examination-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/itsmeravitejak/Online-Examination-System/issues/9","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110696","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004237","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419855","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419855/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/itsmeravitejak/Online-Examination-System/issues/5","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111871","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005048","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421583","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421583/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110837","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110837 — FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based…","description":"FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sa…","indicators":{"cves":["CVE-2026-110837"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:23.853Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-52xc-5973-w5vv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-heap-buffer-overflow-via-mp3-audio-decoding","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-52xc-5973-w5vv","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110838","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110838 — FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state…","description":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes in…","indicators":{"cves":["CVE-2026-110838"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:24.023Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m998-cvfm-9444","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-shadow-before-3.32.0-pre-authentication-input-injection-via-confirm-active-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110839","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110839 — FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-boun…","description":"FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers are sized from one input component rather than three BGR output components. A malicious RDP server can offer a grayscale JPEG via cli…","indicators":{"cves":["CVE-2026-110839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:24.173Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99p4-8j24-wvj4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.3.0-before-3.32.0-heap-out-of-bounds-write-via-grayscale-jpeg-clipboard-data","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-99p4-8j24-wvj4","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110856","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110856 — GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_acto…","description":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid epoc…","indicators":{"cves":["CVE-2026-110856"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:26.760Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gitpython-before-3.2.0-redos-via-re-actor-epoch-in-parse-actor-and-date","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110857","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110857 — GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run c…","description":"GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs without check_unsafe_protocols validation. Attackers can supply ext:: remote-helper URLs to execute commands when git permits the ext transport, while merge…","indicators":{"cves":["CVE-2026-110857"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:26.903Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gitpython-before-3.2.0-command-execution-via-ls-remote-ext-urls","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110858","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110858 — GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() w…","description":"GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard inspects only keyword arguments, not the positional refspec. Attackers controlling the refspec can supply --upload-pack=<command> to execute OS commands as the calling process…","indicators":{"cves":["CVE-2026-110858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:27.043Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gitpython-3.1.30-before-3.2.0-command-injection-via-remote-pull-refspec","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110859","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110859 — GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows r…","description":"GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to read arbitrary files by supplying a branch name parsed as a git option. Attackers can host a repository whose default branch is named --pathspec-from-file=<path>, causing cloning ap…","indicators":{"cves":["CVE-2026-110859"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:27.183Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gitpython-before-3.2.0-arbitrary-file-read-via-head-checkout-branch-name","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110863","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110863 — Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerab…","description":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim's s…","indicators":{"cves":["CVE-2026-110863"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:27.830Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/better-auth/better-auth/security/advisories/GHSA-mx9r-x6ww-qjw9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/better-auth-better-auth-sso-before-1.7.3-authentication-bypass-via-personal-sso-providers","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110864","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110864 — Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the O…","description":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles. When the proxy shares the global secret and cookie-stored state is used, attackers can…","indicators":{"cves":["CVE-2026-110864"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:27.970Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/better-auth/better-auth/security/advisories/GHSA-r4xp-prcw-77qf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/better-auth-1.5.0-beta.12-before-1.7.7-authentication-bypass-via-oauth-proxy","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110865","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110865 — Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to e…","description":"Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by placing hostRules headers inside shared presets. Attackers can supply internal or externally sourced presets with unvalidated hostRules[].headers to inject custo…","indicators":{"cves":["CVE-2026-110865"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:28.110Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/renovatebot/renovate/security/advisories/GHSA-6j6f-fh7w-vvjr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/renovate-before-44.60.1-http-header-allowlist-bypass-via-shared-presets","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110867","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110867 — Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set r…","description":"Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset. Attackers controlling an externally sourced preset can override variables like PATH, LD_PRELOAD, NODE_OPTIONS, or GIT_SSL_CAINFO…","indicators":{"cves":["CVE-2026-110867"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:28.397Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/renovatebot/renovate/security/advisories/GHSA-6873-xr44-22vm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/renovate-before-44.60.1-allowedenv-allowlist-bypass-via-shared-preset","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110868","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110868 — Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to ma…","description":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS credentials or l…","indicators":{"cves":["CVE-2026-110868"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:28.537Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/renovatebot/renovate/security/advisories/GHSA-8rqp-w6vc-pf27","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/renovate-before-44.79.0-ssrf-via-http-preset-urls-and-customdatasources","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110869","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110869 — Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._action…","description":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack quadratically. A malicious or man-in-the-middle SMTP server can reply to EHLO with 250-AUTH…","indicators":{"cves":["CVE-2026-110869"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:28.673Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nodemailer-3.0.0-before-10.0.13-redos-via-smtp-auth-mechanism-detection-regexes","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4ffr-jq9g-5ffx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110873","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110873 — Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared col…","description":"Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's error_workflow_id because the field is missing from OWNER_ONLY_EXECUTION_FIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, an…","indicators":{"cves":["CVE-2026-110873"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:29.237Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/heymrun/heym/security/advisories/GHSA-c3f4-2mrj-jfqr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/heym-0.0.55-before-0.0.121-credential-theft-via-error-workflow-id-field","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-0993","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-0993 — SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allow…","description":"SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP ser…","indicators":{"cves":["CVE-2026-0993"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T01:19:27.290Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://hml.io/posts/blog-post-cve-2026-0993/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-buffer-overflow-dos-via-multipart-boundary-parser","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109430","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109430 — Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerabilit…","description":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to force…","indicators":{"cves":["CVE-2026-109430"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:18:37.150Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.ellucian.com/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ellucian-webadvisor-unauthenticated-xxe-injection","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73799","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-73799 — A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption","description":"A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption","indicators":{"cves":["CVE-2026-73799"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:20:15.457Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76066","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76066 — IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates…","description":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, p…","indicators":{"cves":["CVE-2026-76066"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:20:15.603Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.lasso.security/vulnerability-database/cve-2026-76066","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/intentkit-executor-tool-authorization-bypass-via-toolnode","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76659","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76659 — A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated…","description":"A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.","indicators":{"cves":["CVE-2026-76659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:20:15.897Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76660","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76660 — A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.","description":"A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds\n  write that can corrupt buffer data.","indicators":{"cves":["CVE-2026-76660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:20:16.020Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76661","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76661 — A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.","description":"A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.","indicators":{"cves":["CVE-2026-76661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:20:16.153Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77931","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77931 — MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute…","description":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webpage, search_web, and torrent metadata parsers, which then get passed to the unre…","indicators":{"cves":["CVE-2026-77931"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:20:16.277Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77931","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/moviepilot-command-injection-via-executecommandtool","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110907","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110907 — Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a smal…","description":"Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically insert dynamic data into text. A browser is provided for selecting tokens by type. The product doesn't sufficiently limit…","indicators":{"cves":["CVE-2026-110907"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T03:17:10.640Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://backdropcms.org/security/backdrop-sa-core-2026-009","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110908","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110908 — Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS comm…","description":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression i…","indicators":{"cves":["CVE-2026-110908"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T03:17:10.797Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/pfsense/FreeBSD-ports/blob/a621624266b19a7f48b1f94a60821d2c2fc6ee4c/net/pfSense-pkg-frr/files/usr/local/www/status_frr.php#L62-L73","label":"cve@mitre.org","domainType":"primary"},{"url":"https://redmine.pfsense.org/issues/17134","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76663","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76663 — A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that…","description":"A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.","indicators":{"cves":["CVE-2026-76663"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T03:17:11.233Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14572","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-14572 — The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable t…","description":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Page Builder Text Content in all versions up to, and including, 6.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authentic…","indicators":{"cves":["CVE-2026-14572","CVE-2026-104734","CVE-2026-107762"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T05:17:03.810Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3636487/kirki/trunk/includes/Frontend/Preview/Preview.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3636487%40kirki%2Ftags%2F6.2.1&old=3629933%40kirki%2Ftags%2F6.2.0","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fba01aca-d59f-49ec-bf12-2ad53d39205f?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/Ajax.php#L802","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/Ajax/TemplateExportImport.php#L35","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/ExportImport/TemplateImport.php#L963","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/ExportImport/TemplateImport.php#L987","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743904/kirki/trunk/includes/ExportImport/TemplateImport.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3c760235-ee53-4906-9e25-19df85b8f8ff?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/API/Frontend/Controllers/CollectionController.php#L179","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/API/Frontend/Controllers/FrontendRESTController.php#L64","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/Frontend/Preview/Utils.php#L466","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/kirki/tags/6.3.2/includes/HelperFunctions.php#L1152","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743904/kirki/trunk/includes/API/Frontend/Controllers/CollectionController.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f2fd69f-d432-4eb2-9d28-cfd7dd100e82?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3712","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-3712 — The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up…","description":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for unauthenticat…","indicators":{"cves":["CVE-2026-3712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T05:17:04.067Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3627041/phastpress/trunk/sdk/phast.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3627042%40phastpress%2Ftags%2F3.11&old=3578731%40phastpress%2Ftags%2F3.10","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1c3fbca2-f11f-4f9c-9d70-eea98bdfd3b0?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76665","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76665 — A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buff…","description":"A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.","indicators":{"cves":["CVE-2026-76665"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T05:17:04.310Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15090","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-15090 — The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' p…","description":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo…","indicators":{"cves":["CVE-2026-15090"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:02.160Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3616353/link-library/trunk/usersubmission.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3616354%40link-library%2Ftags%2F7.9.3&old=3515903%40link-library%2Ftags%2F7.9.2","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/96259333-8d6f-4a27-9f52-c65d599ed981?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17031","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-17031 — The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to…","description":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticat…","indicators":{"cves":["CVE-2026-17031"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:02.693Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3699413%40woocommerce-checkout-manager%2Ftags%2F7.9.7&old=3664055%40woocommerce-checkout-manager%2Ftags%2F7.9.6","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/477a0d78-08d9-4e12-9ea2-1e5382b852c7?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-18548","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-18548 — The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to St…","description":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ref' parameter in all versions up to, and including, 4.5.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at…","indicators":{"cves":["CVE-2026-18548"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:03.043Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/groundhoggwp/groundhogg/commit/8a6fe60e751e","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.5.15/assets/js/admin/contacts/contact-editor.js#L848","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/791ee926-edd9-4615-9a46-1d8836938fd9?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-18586","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-18586 — The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthen…","description":"The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via 'order_email' in all versions up to, and including, 7.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…","indicators":{"cves":["CVE-2026-18586"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:03.347Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3637473/wpdm-premium-packages/trunk/src/Admin/Order/views/list-orders.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/53bbed98-7874-44dd-9ded-4012250f8aae?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88043","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88043 — The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_ty…","description":"The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip…","indicators":{"cves":["CVE-2026-88043"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:05.490Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3690677/mangboard/trunk/includes/functions/func.api.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88d62d58-9d06-4a48-b76e-0265892107dc?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101303","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101303 — The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback…","description":"The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.\n\nA process in a classic (non-VNET) jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail networ…","indicators":{"cves":["CVE-2026-101303"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.437Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:69.udp.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101304","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101304 — When fdescfs(4) was mounted in a jail with the \"nodup\" option, opening /dev/fd/N returned a descript…","description":"When fdescfs(4) was mounted in a jail with the \"nodup\" option, opening /dev/fd/N returned a descriptor that did not inherit FD_RESOLVE_BENEATH or the Capsicum capability rights of descriptor N.\n\nA process in a jail that has received a directory file descriptor from another jail can use these techniq…","indicators":{"cves":["CVE-2026-101304"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.550Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:66.jail.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101305","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101305 — renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could re…","description":"renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.  A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir(2).  This requires the directory to reside on a filesystem that is also reachable from the jail's root.\n\nA p…","indicators":{"cves":["CVE-2026-101305"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.663Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:66.jail.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58098","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-58098 — When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upo…","description":"When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps.  Upon waking, it checks the sequence number embedded in the semaphore set's IPC identifier to detect whether the set was removed while the caller was asleep.  This sequence number is only 15 bits wide.…","indicators":{"cves":["CVE-2026-58098"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:02.250Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:64.sysvsem.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58099","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-58099 — When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker…","description":"When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to track list traversal position) before marking them as in-flux and releasing the kqueue lock.  If another thread freed a marker while the lock was dropped, the subsequent in-…","indicators":{"cves":["CVE-2026-58099"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:02.373Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:65.kqueue.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58100","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-58100 — kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descrip…","description":"kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check.  Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file des…","indicators":{"cves":["CVE-2026-58100"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:02.490Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:65.kqueue.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74920","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-74920 — The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input…","description":"The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor,…","indicators":{"cves":["CVE-2026-74920"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:02.610Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://wpscan.com/vulnerability/aa80cef6-b2fd-47ef-bac9-53438aa27573/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79821","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79821 — A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system d…","description":"A security vulnerability in HPE NonStop SOAP 4.0  may cause memory corruption resulting in a system down.","indicators":{"cves":["CVE-2026-79821"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:02.853Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79822","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79822 — A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and pot…","description":"A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.","indicators":{"cves":["CVE-2026-79822"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:02.980Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-81534","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-81534 — The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Executi…","description":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows user-controlled PHP code to be written to ex…","indicators":{"cves":["CVE-2026-81534"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:03.093Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.themehigh.com/changelog/?view=22","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e8d4cd3d-68ad-45ec-b4b3-e705da4e6628?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96537","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96537 — The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that re…","description":"The Tutor LMS  WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated users to force-publish unpublished pages and overwrite their content, create missing ones, and change the options that reference them.","indicators":{"cves":["CVE-2026-96537"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:03.563Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://wpscan.com/vulnerability/e25ac9a8-a29d-4573-9d04-402a14515fb7/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101309","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101309 — The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. Th…","description":"The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.  The size was re-read from guest memory on each use, and Transfer Request Block (TRB) fields were loaded without protection against concurrent modification by the guest.  This race condition could be tr…","indicators":{"cves":["CVE-2026-101309"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T08:16:36.197Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:72.bhyve.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101310","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101310 — The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when s…","description":"The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream.  A zero-length entry caused an out-of-bounds read or write during DMA transfer processing.  BDL fields were also subject to modification by the guest after validation.\n\nA malicious g…","indicators":{"cves":["CVE-2026-101310"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T08:16:36.313Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:72.bhyve.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101311","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101311 — The framebuffer device model's maximum resolution constants were duplicated between the framebuffer…","description":"The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.  Additionally, writes to the framebuffer BAR could set arbitrary width and height values without validation, and the framebuffer BAR I/O and RFB rendering t…","indicators":{"cves":["CVE-2026-101311"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T08:16:36.423Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:72.bhyve.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101290","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101290 — A remote attacker may send a specially crafted network packet that causes the affected application t…","description":"A remote attacker may send a specially crafted network packet that causes the\naffected application to perform an out-of-bounds memory read due to insufficient validation of\npacket length. This may result in an application crash and a denial-of-service condition.","indicators":{"cves":["CVE-2026-101290"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:14.727Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","label":"psirt@sick.de","domainType":"primary"},{"url":"https://www.first.org/cvss/calculator/3.1","label":"psirt@sick.de","domainType":"other"},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0015.json","label":"psirt@sick.de","domainType":"other"},{"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0015.pdf","label":"psirt@sick.de","domainType":"other"},{"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","label":"psirt@sick.de","domainType":"other"},{"url":"https://www.sick.com/psirt","label":"psirt@sick.de","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109855","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109855 — undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSoc…","description":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the under…","indicators":{"cves":["CVE-2026-109855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:16.573Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-26244","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-26244 — A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains…","description":"A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.\n\nWe have already fixed the vulnerability in the following version:\nVideo Station 5.8.8 and later","indicators":{"cves":["CVE-2026-26244","CVE-2026-26245"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:12.917Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Video%20Station&app=VideoStationPro&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-44084","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-44084 — An authorization bypass through user-controlled key vulnerability has been reported to affect Video…","description":"An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.\n\nWe have already fixed the vulnerability in the following version:\nVideo Station 5.8.8 and later","indicators":{"cves":["CVE-2026-44084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:14.587Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Video%20Station&app=VideoStationPro&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79824","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79824 — A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arb…","description":"A directory traversal vulnerability in HPE NonStop Python 3.x could allow  attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.","indicators":{"cves":["CVE-2026-79824"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.483Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79825","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79825 — A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potenti…","description":"A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.","indicators":{"cves":["CVE-2026-79825"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.607Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79826","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79826 — A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect…","description":"A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.","indicators":{"cves":["CVE-2026-79826"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.727Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79827","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79827 — A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and m…","description":"A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.","indicators":{"cves":["CVE-2026-79827"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.840Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79828","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79828 — A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may…","description":"A heap buffer overflow in HPE NonStop Debug Utilities  could corrupt resume-execution address and may potentially redirect execution flow.","indicators":{"cves":["CVE-2026-79828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.963Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79829","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79829 — A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result…","description":"A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.","indicators":{"cves":["CVE-2026-79829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:16.083Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109695","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109695 — Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-c…","description":"Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive Data.This issue affects FluentCart: from n/a through 1.7.1.","indicators":{"cves":["CVE-2026-109695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:17:27.113Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/fluent-cart/vulnerability/wordpress-fluentcart-plugin-1-7-1-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79832","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79832 — A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in infor…","description":"A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.","indicators":{"cves":["CVE-2026-79832"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:17:50.313Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79833","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79833 — A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an aff…","description":"A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.","indicators":{"cves":["CVE-2026-79833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:17:50.433Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110726","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110726 — In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`,…","description":"In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded-For` request header. That element is supplied by the originating HTTP client and is not validated against any trusted-pr…","indicators":{"cves":["CVE-2026-110726","CVE-2026-110723","CVE-2026-110724"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:16:37.517Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/eclipse-ecsp/api-gateway/pull/330","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://github.com/eclipse-ecsp/api-gateway/security/advisories/GHSA-ch6x-rg7q-7jfx","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/404","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-ecsp/api-gateway/security/advisories/GHSA-m468-w7pr-f39w","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/406","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/eclipse-ecsp/api-gateway/security/advisories/GHSA-4j9j-mx7g-p9p6","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/405","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79834","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79834 — A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform u…","description":"A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.","indicators":{"cves":["CVE-2026-79834"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:16:39.497Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107416","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107416 — Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-…","description":"Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.2.","indicators":{"cves":["CVE-2026-107416"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:10.930Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/webba-booking-lite/vulnerability/wordpress-webba-booking-plugin-6-5-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79837","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79837 — A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termin…","description":"A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.","indicators":{"cves":["CVE-2026-79837"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:13.707Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93649","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-93649 — In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-…","description":"In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-download page /[locale]/download takes a download URL from the \"link\" query parameter and automatically navigates to it with a meta http-e…","indicators":{"cves":["CVE-2026-93649"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:30.107Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/adoptium/adoptium.net/commit/cbb53cf4a41f068a70902217473d7e2fe5d6c6ad","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://github.com/adoptium/adoptium.net/security/advisories/GHSA-f228-m952-5r6w#event-1046947","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/313","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108116","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108116 — In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotG…","description":"In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup into SOAP requests, potentially exposing data accessible through the configured XMLA connection.","indicators":{"cves":["CVE-2026-108116"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:22.753Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-pivotgrid-mdx-soap-injection-cve-2026-108116","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110746","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110746 — A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the…","description":"A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\\SYSTEM.","indicators":{"cves":["CVE-2026-110746"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:28.487Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/lukehebe/Vulnerability-Disclosures/tree/main/TotalAV-7.1.17-LPE","label":"cret@cert.org","domainType":"primary"},{"url":"https://www.totalav.com/","label":"cret@cert.org","domainType":"other"},{"url":"https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/TotalAV-7.1.17-LPE/TotalAV_LPE.c","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-53574","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53574 — EspoCRM is an open source customer relationship management application. From 8.1.0 until 9.3.8, an a…","description":"EspoCRM is an open source customer relationship management application. From 8.1.0 until 9.3.8, an authenticated non-administrator can submit a crafted where parameter to the GET entity streamAttachments endpoint because that query path permits complex expressions. Boolean-based blind SQL injection…","indicators":{"cves":["CVE-2026-53574"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:35.180Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/e4a6aea90886d672f96b5d9a7cb0722e3d3654e1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-qgm7-fc9g-fj75","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-79838","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79838 — A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulti…","description":"A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.","indicators":{"cves":["CVE-2026-79838"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:37.580Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79839","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79839 — A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting…","description":"A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.","indicators":{"cves":["CVE-2026-79839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:37.693Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79840","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79840 — A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in ap…","description":"A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.","indicators":{"cves":["CVE-2026-79840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:37.810Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95179","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95179 — An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial…","description":"An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.","indicators":{"cves":["CVE-2026-95179"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:38.790Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/FFG0d/security-advisories/blob/main/advisories/CVE-2026-95179.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Samsung/rlottie/pull/603","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/airbnb/lottie-android","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-9703","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-9703 — Grafana's data source proxy did not apply role-based access control to write requests forwarded to L…","description":"Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an affected Grafana instance could send POST, PUT and DELETE requests through the proxy to the Loki rules API (/loki/api/v1/rules), allowing th…","indicators":{"cves":["CVE-2026-9703"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:39.180Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-9703","label":"security@grafana.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100351","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100351 — kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.V…","description":"kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a downstream gorilla/mux router configured with UseEncodedPath can dispatch a different operation selected from URL.RawPath…","indicators":{"cves":["CVE-2026-100351"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:31.110Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/eda80e2676e9f577ceed2dd80e64f16083edb041","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.147.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-23vg-4cjm-66q5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-23vg-4cjm-66q5","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100352","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100352 — kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation…","description":"kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values to santhosh-tekuri/jsonschema v6.0.2 without applying kin-openapi's existing finite-number guards. A remote unauthenticated client can send an applica…","indicators":{"cves":["CVE-2026-100352"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:31.307Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/4487f198ab8be0c37d6ca72c54f5dca4dc25270e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.148.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-rj39-cv6w-8wv7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111091","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111091 — In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP serv…","description":"In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration","indicators":{"cves":["CVE-2026-111091"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:48.637Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","label":"cve@jetbrains.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111093","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111093 — In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint al…","description":"In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files","indicators":{"cves":["CVE-2026-111093"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:48.883Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","label":"cve@jetbrains.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111094","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111094 — In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypas…","description":"In JetBrains TeamCity before 2026.2, \n2026.1.4, \n2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible","indicators":{"cves":["CVE-2026-111094"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:48.993Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","label":"cve@jetbrains.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111095","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111095 — In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview…","description":"In JetBrains TeamCity before 2026.2, \n2026.1.4, \n2025.11.8 stored XSS in the classic project overview was possible","indicators":{"cves":["CVE-2026-111095"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:49.103Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","label":"cve@jetbrains.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-45449","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-45449 — : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera…","description":": Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.","indicators":{"cves":["CVE-2026-45449"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:10.993Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0","label":"cna@cyber.gov.il","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-45450","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-45450 — : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronic…","description":": Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.","indicators":{"cves":["CVE-2026-45450"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:11.617Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0","label":"cna@cyber.gov.il","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-45451","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-45451 — : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue…","description":": Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.","indicators":{"cves":["CVE-2026-45451"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:11.787Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0","label":"cna@cyber.gov.il","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-45452","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-45452 — Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniL…","description":"Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.\n\nThis issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.","indicators":{"cves":["CVE-2026-45452"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:11.983Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0","label":"cna@cyber.gov.il","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53582","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53582 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust modul…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsField.php and s…","indicators":{"cves":["CVE-2026-53582"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:12.827Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/e2cd067343511252fb0d391a17d82d3ecceece45","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/fc2f0d745c17855d2027b192fd4e3fa913e26859","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-xww7-76m6-mh2r","label":"security-advisories@github.com","domainType":"primary"},{"url":"http://seclists.org/fulldisclosure/2026/Jul/18","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58390","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-58390 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN con…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view place a client common_name into data-common-name attributes without quote-safe encoding.…","indicators":{"cves":["CVE-2026-58390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:17.890Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/11180daf579879d84d91a7fbea7a59320bc80868","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/e7b2ac8093f804bef8eb88dfa9a0d99fad00c12b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-26cj-h9rj-g5pf","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63442","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63442 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthentic…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and line-feed characters that survive LOG_AUTH processing through syslog-ng-lockout.conf into the syslog-ng program destination feeding lockout_ha…","indicators":{"cves":["CVE-2026-63442"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:19.157Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/8bdaad95f405f4587bb83bf35aa652ca493cc2a4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/c930ab586ffe2d2e010e5135657e5e054316ff58","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-2v2x-m4j7-76pv","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-71490","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-71490 — OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\\Core\\ACL::hasP…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\\Core\\ACL::hasPrivilege() appends a directly assigned comma-separated <priv> value as one string and then uses an exact comparison when checking user-config-readonly. A user directly assigned both a component write…","indicators":{"cves":["CVE-2026-71490"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:19.723Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/578e025111161ffd03fd3fd0ccdac203be546505","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/e15a884973746319e79bd2cd421e8a015cc3ddb9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/f674f4ff294a3f7c4cd0591563f6df47bea50034","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-p9pr-782r-w2xw","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-p9pr-782r-w2xw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-92982","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92982 — A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2…","description":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expression…","indicators":{"cves":["CVE-2026-92982"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:23.657Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-92982","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2522227","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95155","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95155 — FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.…","description":"FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.","indicators":{"cves":["CVE-2026-95155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:24.470Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/FasterXML/jackson-1","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/FasterXML/jackson-1/issues/11","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97394","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97394 — kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter a…","description":"kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences the nil Schema.Items value while decoding application/x-www-form-urlencoded or multipart/form-data request bodies, respo…","indicators":{"cves":["CVE-2026-97394"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:25.273Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.143.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100353","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100353 — kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3fi…","description":"kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths that were missed by the fix for GHSA-p6wj-qrr4-pgh5 lack a nil-items guard for legal OpenAPI 3.1 array schemas. An unauthenticated remote client can trigger a deterministic nil-poin…","indicators":{"cves":["CVE-2026-100353"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:07.627Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/9814d1f2b212f3508bf52296aa9e248b2122a5a9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.149.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-vrcc-3ch7-hppw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100354","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100354 — kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response,…","description":"kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema, even though loading and document validation accept the circular reference. A…","indicators":{"cves":["CVE-2026-100354"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:07.780Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/9245cef66c840e27a08409a8a5cd0ee930c5bcff","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.149.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-g8cf-rcjf-c8cf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-g8cf-rcjf-c8cf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100409","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100409 — OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications…","description":"OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications that enable enableCacheInterception, rely on middleware for access control, and have a matching cached protected route process encoded pathnames inconsistently between middleware matching and cache l…","indicators":{"cves":["CVE-2026-100409"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:07.923Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opennextjs/opennextjs-aws/pull/1199","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opennextjs/opennextjs-aws/pull/1200","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opennextjs/opennextjs-cloudflare/commit/38ea40b669be272ddf09a7df7e70c69d0b57404b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opennextjs/opennextjs-cloudflare/releases/tag/@opennextjs/cloudflare@1.20.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opennextjs/opennextjs-cloudflare/security/advisories/GHSA-2vc4-c4r6-p6v6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-61611","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-61611 — Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has no throttle, attempt counter, backoff, CAPTCHA, or lockout. UnlockAlbumRequest::authorize() permits any caller to submit attempts, and app/Actions/Album/Unlock.php verifies each guess with Hash::check…","indicators":{"cves":["CVE-2026-61611"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:26.537Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/592291458a3373114a21412956fd23cfcda32aba","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4448","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.6.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-48vf-fwx6-2ph6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85634","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85634 — A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core libra…","description":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker wit…","indicators":{"cves":["CVE-2026-85634"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:29.250Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-85634","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528476","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103936","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103936 — libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/w…","description":"libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/webrtc webRTCDirect() Node.js listener processes unauthenticated STUN Binding Requests before PeerId authentication, Noise, muxing, protocol negotiation, connection creation, or connection-manager admi…","indicators":{"cves":["CVE-2026-103936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:22.433Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libp2p/js-libp2p/commit/68794c8e2e67d5f38da59e379dc051b2789e46f6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/libp2p/js-libp2p/pull/3584","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/libp2p/js-libp2p/releases/tag/webrtc-v6.0.28","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/libp2p/js-libp2p/security/advisories/GHSA-x3m2-6mg8-vj7f","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55103","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55103 — Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0…","description":"Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, inbound ActivityPub processing does not sufficiently verify that the actor authenticated by the signed request matches the Activity actor and owns the referenced federated post. A r…","indicators":{"cves":["CVE-2026-55103"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:27.163Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/discourse/discourse-activity-pub/commit/1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse-activity-pub/security/advisories/GHSA-jw39-rch6-mhwf","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55246","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55246 — bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.…","description":"bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled num_pages field as the loop bound for byte-swapping page_sizes entries. A crafted file can make the loop…","indicators":{"cves":["CVE-2026-55246"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:27.317Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/Tatsh/bincookie/commit/bc1433c1ee4d0284750ff85c8437f1b8df91ab3b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Tatsh/bincookie/releases/tag/v0.1.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Tatsh/bincookie/security/advisories/GHSA-22pc-xxw4-q849","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Tatsh/bincookie/security/advisories/GHSA-22pc-xxw4-q849","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104827","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104827 — react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.…","description":"react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, React\\Http\\Browser uses ClientRequestStream::handleData() to append response-header bytes to an internal buffer without enforcing a size limit. A remote server can send a valid statu…","indicators":{"cves":["CVE-2026-104827"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:14.933Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/reactphp/http/commit/2558622d0b76227c60c61eac8a61572cb6638e8c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/reactphp/http/releases/tag/v1.11.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/reactphp/http/security/advisories/GHSA-g4f2-2pf3-2pwj","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104828","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104828 — HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded…","description":"HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded TEXTAREA and TITLE character content without entity encoding because both elements are treated as special content. During a parse-and-serialize round trip, entity references inside these escapable ra…","indicators":{"cves":["CVE-2026-104828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:15.083Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/HtmlUnit/htmlunit-neko/commit/c165891e0753aef3e05f5daa6250d3e8d4ada3c0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/HtmlUnit/htmlunit-neko/releases/tag/5.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-39xg-prhf-8785","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108334","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108334 — A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generat…","description":"A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly escape values from HTTPRoute match fields. A user who can create or…","indicators":{"cves":["CVE-2026-108334"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:20.187Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:83531","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-108334","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548768","label":"secalert@redhat.com","domainType":"other"},{"url":"https://github.com/Kuadrant/kuadrant-operator/commit/7e667dc216e6ad38feaeadb391da59aa0380057a","label":"secalert@redhat.com","domainType":"primary"},{"url":"https://github.com/advisories/GHSA-fcw2-f6v9-6ffp","label":"secalert@redhat.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109383","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109383 — undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0…","description":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functi…","indicators":{"cves":["CVE-2026-109383"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:20.853Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109829","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109829 — undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.1…","description":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler c…","indicators":{"cves":["CVE-2026-109829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:21.513Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109869","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109869 — undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30…","description":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sen…","indicators":{"cves":["CVE-2026-109869"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:21.770Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111160","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111160 — LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attack…","description":"LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference worker by supplying the internal pd_kv_trans_params field to the /generate endpoint. Attackers can send a single request whose parameters cause pickle.loads to fail in Infer…","indicators":{"cves":["CVE-2026-111160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:31.100Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/ModelTC/LightLLM","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ModelTC/LightLLM/issues/1629","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/api_lightllm.py#L37-L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/core/objs/sampling_params.py#L356-L357","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/router/model_infer/infer_batch.py#L484-L485","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/lightllm-through-1.2.0-unauthenticated-dos-via-pd-kv-trans-params-deserialization","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111214","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111214 — Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows au…","description":"Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalidated parent interface name. Attackers can save a crafted 'if' value, then edit the QinQ entry so it is interpolated into…","indicators":{"cves":["CVE-2026-111214","CVE-2026-111218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:33.603Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://abraxaslabs.tech/research/pfsense-qinq-parent-if","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-qinq-parent-if","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/interfaces.inc#L620","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_qinq_edit.php#L136","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_qinq_edit.php#L212","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-os-command-injection-via-interfaces-qinq-edit-php","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://abraxaslabs.tech/research/pfsense-limiter-number","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-limiter-number","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/shaper.inc#L3820-L3821","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/shaper.inc#L3959","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-os-command-injection-via-traffic-shaper-limiters","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111215","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111215 — Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenti…","description":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;<cmd…","indicators":{"cves":["CVE-2026-111215","CVE-2026-111216","CVE-2026-111217"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:33.757Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-assign-if-add","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/abraxas/pfsense-wireless-clone","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/interfaces.inc#L3370","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_assign.php#L187","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_wireless_edit.php#L77","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-os-command-injection-via-wireless-parent-interface","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-gw-ipv6-zone","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/gwlb.inc#L535","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/util.inc#L1418","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-os-command-injection-via-gateway-monitor-ip","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://abraxaslabs.tech/research/pfsense-carp-vhid","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-carp-vhid","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/interfaces.inc#L3236-L3238","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/pfsense-utils.inc#L794","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/pfSense/include/www/firewall_virtual_ip.inc#L200","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-os-command-injection-via-carp-vhid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111220","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111220 — pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that…","description":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit c…","indicators":{"cves":["CVE-2026-111220"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:34.500Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-pppoe-cron","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/interfaces.inc#L2174-L2214","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/services.inc#L5652-L5660","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/interfaces_ppps_edit.php#L271-L278","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-crontab-injection-via-ppp-periodic-reset-ptpid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111223","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111223 — Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows…","description":"Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the login_banner field. Attackers can submit a single-line banner containing '}' to escape the unquoted strongswan.conf…","indicators":{"cves":["CVE-2026-111223"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:34.943Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://abraxaslabs.tech/research/pfsense-ipsec-login-banner","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-ipsec-login-banner","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1361-L1388","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/ipsec.inc#L1842-L1845","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/vpn_ipsec_mobile.php#L269-L273","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/commit/27a52d0807","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-ipsec-mobile-login-banner","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111224","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111224 — pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.conne…","description":"pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute commands as root via crafted usernames. Attackers authenticated through RADIUS or LDAP can use usernames containing single quotes and…","indicators":{"cves":["CVE-2026-111224"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:35.090Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-ovpn-connect-eval","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/sbin/openvpn.connect_async.sh#L83-L114","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-os-command-injection-via-openvpn-connect-async-sh","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111226","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111226 — pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authentica…","description":"pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as root via Login Protection settings. Attackers can submit sshguard threshold, block time, or detection time values containin…","indicators":{"cves":["CVE-2026-111226"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:35.373Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-sshguard-crlf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/syslog.inc#L531-L563","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/pfSense/include/www/system_advanced_admin.inc#L355-L381","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.4.5-through-2.9.0-os-command-injection-via-system-advanced-admin-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111229","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111229 — pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_…","description":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell m…","indicators":{"cves":["CVE-2026-111229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:35.813Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-cp-ha-pfctl","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/captiveportal.inc#L2958-L2966","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_captiveportal_hasync.php#L106-L140","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.0-through-2.9.0-command-injection-via-captive-portal-ha-sync","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111231","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111231 — Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-onl…","description":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install() ignore the 'User - Config: Deny Config Write' privilege. Attackers holding page privileges for services_acb.php, uplo…","indicators":{"cves":["CVE-2026-111231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:36.110Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-config-readonly-restore","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/config.lib.inc#L588-L597","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/config.lib.inc#L743-L798","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-authorization-bypass-via-config-restore-and-config-install","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-36436","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-36436 — An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the ad…","description":"An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code to retrieve the credential.","indicators":{"cves":["CVE-2026-36436"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:38.520Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/vtrmk/CVE-2026-36436-Public-Reference-Pack","label":"cve@mitre.org","domainType":"primary"},{"url":"https://www.trisolutions.com.br/","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.ufrgs.br/gimscop/about-us/products/brperfx-br-pga/","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55587","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55587 — AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the Al…","description":"AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier matches the current website. A malicious w…","indicators":{"cves":["CVE-2026-55587"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:40.657Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/aliasvault/aliasvault/commit/a60d0966e66ecf4f6558dc40e3feb1313072ce2b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aliasvault/aliasvault/releases/tag/0.29.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aliasvault/aliasvault/security/advisories/GHSA-f99p-jfhr-6ffc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55871","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-55871 — GYM One is open-source gym management software for fitness centers, personal trainers, and sports cl…","description":"GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php concatenates the search_name and search_email GET parameters into both the user-list query and the COUNT query used for pagination without prepared…","indicators":{"cves":["CVE-2026-55871","CVE-2026-55872"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:41.150Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/mayerbalintdev/GYM-One/commit/d3a0cf134f0ab3ac12aee7dca283b93c4290dcc4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mayerbalintdev/GYM-One/releases/tag/V1.4.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mayerbalintdev/GYM-One/security/advisories/GHSA-9j4g-cq35-8997","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mayerbalintdev/GYM-One/security/advisories/GHSA-75g9-vp9w-5388","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87018","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87018 — undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0…","description":"undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does not m…","indicators":{"cves":["CVE-2026-87018"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:46.600Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97370","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97370 — Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/jav…","description":"Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VM_JMP instruction whose target is greater than or equal to the prepared program's codeSize. The setIP() function returns success with…","indicators":{"cves":["CVE-2026-97370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:49.983Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/junrar/junrar/commit/687a09c42f46066447faa9179ee11314ad6d9afb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/junrar/junrar/releases/tag/v7.6.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/junrar/junrar/security/advisories/GHSA-h9h9-2rmf-rvhp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106700","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106700 — ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management en…","description":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs no r…","indicators":{"cves":["CVE-2026-106700"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T20:17:06.297Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/elunez/eladmin","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106700.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106700.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106708","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106708 — XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the…","description":"XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController). The endpoints /user/insert, /user/update, and /user/delete lack CSRF protection and do not restrict HTTP method.","indicators":{"cves":["CVE-2026-106708"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T20:17:06.420Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106708.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/xuxueli/xxl-job","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105033","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105033 — The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabl…","description":"The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.","indicators":{"cves":["CVE-2026-105033"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:03.883Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105034","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105034 — The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers wi…","description":"The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.","indicators":{"cves":["CVE-2026-105034"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:03.997Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000001111111111100000000000000000000000011111111001111111111000000000000000000010110111111111100000000000000000001110/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105035","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105035 — The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-cod…","description":"The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations. An attacker who recovers the key from the updater can decrypt and forge firmware packages for any device that trusts it.","indicators":{"cves":["CVE-2026-105035"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:04.113Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000001111111111100000000000000000000000011111111100111111111000000000000000000011111111111111100000000000000000001111/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105036","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105036 — EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the En…","description":"EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a ma…","indicators":{"cves":["CVE-2026-105036"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:04.230Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000111111111100000000000000000000000011111100001111111101000000000000000000011111111111111100000000000000000010000/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105040","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105040 — The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update reques…","description":"The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.","indicators":{"cves":["CVE-2026-105040"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:04.703Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","label":"cve@takeonme.org","domainType":"primary"},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000011111111111111111111000000000000000000011111101001111111110000000000000000000011111111111111111111000000000000010100/","label":"cve@takeonme.org","domainType":"other"},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","label":"cve@takeonme.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108442","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108442 — Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo…","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-108442"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:09.727Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108442","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108443","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108443 — Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a net…","description":"Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-108443"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:09.840Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108443","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108451","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108451 — Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code ov…","description":"Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-108451"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:10.790Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108451","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111357","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111357 — Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache co…","description":"Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.","indicators":{"cves":["CVE-2026-111357"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:13.190Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.volexity.com/blog/2026/10/13/a-series-of-unauthenticated-events-chained-exploitation-of-ivanti-connect-secure-zero-days/","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110913","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110913 — Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execut…","description":"Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110913"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:26.620Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/567638392","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110914","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110914 — Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to po…","description":"Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","indicators":{"cves":["CVE-2026-110914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:26.737Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/563194341","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110915","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110915 — Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to e…","description":"Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)","indicators":{"cves":["CVE-2026-110915"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:26.843Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/556272421","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110919","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110919 — Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute ar…","description":"Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110919","CVE-2026-110921"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.267Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568831769","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/569286602","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110920","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110920 — Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute…","description":"Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110920"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.367Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/569659194","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110922","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110922 — Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to exe…","description":"Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","indicators":{"cves":["CVE-2026-110922"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.570Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568719351","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111277","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111277 — NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of ac…","description":"NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order_id. Attackers can iterate the order_id parameter, which matches guest orders stored with custom…","indicators":{"cves":["CVE-2026-111277"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:28.770Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/nivocart/nivocart","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nivocart/nivocart/blob/5bc2c3fc7caed9846b58959183f8ccf599cd4399/upload/catalog/controller/account/order.php#L695-L770","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nivocart/nivocart/blob/5bc2c3fc7caed9846b58959183f8ccf599cd4399/upload/catalog/model/account/order.php#L11-L12","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nivocart/nivocart/issues/26","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nivocart-through-2.5.1-guest-order-invoice-disclosure-via-account-order-download","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/nivocart/nivocart/issues/26","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111279","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111279 — Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenti…","description":"Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. Attackers can send a single command against a one-element key with a huge negative COUNT to trigg…","indicators":{"cves":["CVE-2026-111279"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:29.157Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/dragonflydb/dragonfly","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dragonflydb/dragonfly/blob/8ce4bbb106586057fbd85f71ed353c60d0d5bf87/src/server/hset_family.cc#L1436-L1483","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dragonflydb/dragonfly/blob/8ce4bbb106586057fbd85f71ed353c60d0d5bf87/src/server/set_family.cc#L957-L984","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dragonflydb/dragonfly/blob/8ce4bbb106586057fbd85f71ed353c60d0d5bf87/src/server/zset_family.cc#L1519-L1522","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dragonflydb/dragonfly/issues/8578","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/dragonfly-through-2.0.2-unbounded-memory-allocation-via-negative-count-in-hrandfield-zrandmember-and-srandmember","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/dragonflydb/dragonfly/issues/8578","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111280","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111280 — snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea()…","description":"snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an unchecked DataLength field. Rogue or impersonated PLCs can return crafted ReadVar responses causing memcpy of up to 65535 bytes into c…","indicators":{"cves":["CVE-2026-111280"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:29.317Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/davenardella/snap7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/davenardella/snap7/blob/30f37da3114024a71ba93f7fd855c680b97a406f/src/core/s7_micro_client.cpp#L136-L150","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/davenardella/snap7/issues/31","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/snap7-through-1.4.3-out-of-bounds-write-via-tsnap7microclient-opreadarea","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111282","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111282 — Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer…","description":"Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attackers can send a short RequestFileTransfer (SID 0x38) request with filePathAndNameLength 0xFFFC-0xFFFF, causing callbacks to…","indicators":{"cves":["CVE-2026-111282"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:29.600Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/driftregion/iso14229","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/driftregion/iso14229/blob/0.10.0/src/server.c#L1151-L1161","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/driftregion/iso14229/commit/2e36afcd7f0cd02b0c70446c1a265a7b1999d478","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/driftregion/iso14229/releases/tag/0.10.1%2B9e7c47e8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/driftregion/iso14229/security/advisories/GHSA-5hgv-5fqg-8vcr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/driftregion/iso14229/security/advisories/GHSA-ph4f-7v39-8hgm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/iso14229-before-0.10.1-out-of-bounds-read-via-handle-0x38-requestfiletransfer","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/driftregion/iso14229/security/advisories/GHSA-5hgv-5fqg-8vcr","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111312","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111312 — OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /a…","description":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medica…","indicators":{"cves":["CVE-2026-111312"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:30.053Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/OpenHealthForAll/open-health","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OpenHealthForAll/open-health/blob/v0.2.0/src/app/api/health-data/%5Bid%5D/route.ts#L13-L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OpenHealthForAll/open-health/blob/v0.2.0/src/middleware.ts#L20","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/open-health-health-data-id-missing-auth-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/openhealth-through-0.2.0-missing-authentication-via-api-health-data-id-route","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111352","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111352 — ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController…","description":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list…","indicators":{"cves":["CVE-2026-111352"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:33.043Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/thinkcmf/cmf-api/blob/v8.0.7/src/admin/controller/RoleController.php#L345-L381","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thinkcmf/cmf-core/blob/v8.0.3/src/controller/RestAdminBaseController.php#L15-L34","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thinkcmf/cmf-core/blob/v8.0.3/src/lib/Auth.php#L40-L61","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/thinkcmf-admin-rest-api-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/thinkcmf-through-8.0.1-incorrect-authorization-in-admin-rest-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111356","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111356 — MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, a…","description":"MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the member's password.","indicators":{"cves":["CVE-2026-111356"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:33.647Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/magicblack/maccms10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/magicblack/maccms10/blob/v2026.1000.4056/application/common/model/User.php#L1199-L1231","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/magicblack/maccms10/blob/v2026.1000.4056/application/common/model/User.php#L1397-L1450","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/maccms10-password-reset-code-brute-force-account-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/maccms-v10-through-2026.1000.4056-account-takeover-via-password-recovery-brute-force","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/maccms10-password-reset-code-brute-force-account-takeover","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111359","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111359 — CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows aut…","description":"CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders via the gift-order API. Attackers can enumerate sequential order IDs in gift_detail to harvest buyer identities and the gift_key, then…","indicators":{"cves":["CVE-2026-111359"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:33.937Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/crmeb/CRMEB","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/crmeb/CRMEB/blob/v6.0.0/crmeb/app/services/order/StoreOrderServices.php#L2998-L3085","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/crmeb-gift-order-idor-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/crmeb-5.6.1-through-6.0.0-idor-via-giftdetail-and-receivegift","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111366","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111366 — cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows departmen…","description":"cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or delete to read records, r…","indicators":{"cves":["CVE-2026-111366"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:34.557Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/cool-team-official/cool-admin-midway","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/cool-team-official/cool-admin-midway/blob/e545ef6f3b0c08581e34bd3207ca57d851ccc3ae/src/modules/base/service/sys/user.ts#L205-L229","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/cool-team-official/cool-admin-midway/blob/e545ef6f3b0c08581e34bd3207ca57d851ccc3ae/src/modules/base/service/sys/user.ts#L41-L70","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/cool-admin-midway-base-crud-role-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cool-admin-midway-through-8.0.0-authorization-bypass-via-admin-sys-user-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/cool-admin-midway-base-crud-role-ownership-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111369","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111369 — ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:…","description":"ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change titles and stored HTML content or delete l…","indicators":{"cves":["CVE-2026-111369"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:35.013Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/classroomio/classroomio","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/classroomio/classroomio/blob/v1.0.0/apps/api/src/middlewares/course-member.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/classroomio/classroomio/blob/v1.0.0/apps/api/src/routes/course/lesson.ts#L107-L152","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/classroomio-course-resource-id-scoping-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/classroomio-through-1.0.0-incorrect-authorization-via-lesson-update-and-delete-routes","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111210","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111210 — A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection o…","description":"A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Request Handler. Executing a manipulation of the argument pki_type can lead to server-side request forgery. It is possible to launch the attack…","indicators":{"cves":["CVE-2026-111210"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:04.180Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/bitcoinj/bitcoinj/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/bitcoinj/bitcoinj/issues/4386","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/bitcoinj/bitcoinj/security/advisories/GHSA-cqq6-f9cp-chrp","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111210","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004847","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420761","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420761/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75941","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-75941 — A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusivel…","description":"A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.","indicators":{"cves":["CVE-2026-75941"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:05.420Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://iknow.lenovo.com.cn/detail/442627","label":"psirt@lenovo.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84823","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-84823 — A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based…","description":"A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the `take-snapshot` operation. By manipulating the `name` parameter, this user can write a copy of the server configuration t…","indicators":{"cves":["CVE-2026-84823"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:05.573Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-84823","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2527902","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92629","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92629 — A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distribut…","description":"A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.","indicators":{"cves":["CVE-2026-92629"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:07.190Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://iknow.lenovo.com.cn/detail/442628","label":"psirt@lenovo.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111378","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111378 — FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in pars…","description":"FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. Attackers can complete TLS and stream bytes not beginning with the DER SEQUENCE tag 0x30, causing unbounded receive buffe…","indicators":{"cves":["CVE-2026-111378"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:04.850Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-unauthenticated-memory-exhaustion-via-nla-frame-parser","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qpfh-m9w6-xf2x","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111379","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111379 — FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v…","description":"FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persistent cache file. Attackers can set large width and height values that wrap the size calculation in persist_cache_get_dat…","indicators":{"cves":["CVE-2026-111379","CVE-2026-111381"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:04.980Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-945c-qq5h-jqwp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-before-3.32.0-heap-buffer-overflow-via-persistent-cache-read-entry-v3","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/programmervuln/freerdp-persistent-cache-v3-heapoverflow","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-26cc-wjh8-hjw6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-before-3.32.0-heap-buffer-overflow-via-persistent-cache-v2-parser","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111380","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111380 — FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_ma…","description":"FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send FramesPerPacket…","indicators":{"cves":["CVE-2026-111380"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:05.123Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-72qv-gcph-rfwf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.29.0-before-3.32.0-heap-overflow-via-audin-apple-backends","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111382","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111382 — FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaT…","description":"FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Attackers can send RDPGFX AVC444 or AVC444v2 frames with odd-height region rects ending at surface heig…","indicators":{"cves":["CVE-2026-111382"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:05.400Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f4pf-pgp4-f2r3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-before-3.32.0-heap-out-of-bounds-write-in-avc444-yuv444-combine","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111389","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111389 — Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injecti…","description":"Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Any authenticated attacker, including a low-privilege account, can send specially crafted requests to these endpoints to extract…","indicators":{"cves":["CVE-2026-111389"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:06.540Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/frappe/hrms/security/advisories/GHSA-jfmr-9jv9-mrw4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/frappe-hrms-14.0.0-before-14.38.2-sql-injection-via-missing-validation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103518","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103518 — The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnera…","description":"The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].<attacker-chosen key>' parameter in all versions up to, and including, 1.7.0 due to insufficient escaping on the user supplied parameter a…","indicators":{"cves":["CVE-2026-103518","CVE-2026-103525"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:21.027Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/api/Resource/ProductResource.php#L304","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/app/Http/Controllers/ProductController.php#L1818","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/app/Models/BatchQuery/Batch.php#L103","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/app/Models/Concerns/CanUpdateBatch.php#L14","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/app/Services/BulkProductUpdateService.php#L413","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3734886/fluent-cart/trunk/app/Models/BatchQuery/Batch.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/fluent-cart/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/094a768d-85f8-4b6a-8aa3-e243f2e4b505?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/api/Checkout/CheckoutApi.php#L124","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/api/Checkout/CheckoutApi.php#L338","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/api/Checkout/CheckoutApi.php#L369","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fluent-cart/tags/1.7.0/app/Hooks/Cart/WebCheckoutHandler.php#L132","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3734886%40fluent-cart&new=3734886%40fluent-cart","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8375a8f4-274d-4c4f-8833-067efc7e57a2?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104745","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104745 — The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Esca…","description":"The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. The vulnerability exists because `alg_wc_ev_generate_user_code()` generates the per-user activation secret us…","indicators":{"cves":["CVE-2026-104745"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:21.607Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/3.3.0/includes/alg-wc-ev-functions.php#L331","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/3.3.0/includes/class-alg-wc-ev-core.php#L1258","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/3.3.0/includes/class-alg-wc-ev-core.php#L498","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/3.3.0/includes/class-alg-wc-ev-core.php#L784","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3744623%40emails-verification-for-woocommerce&new=3744623%40emails-verification-for-woocommerce","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6df7b3ed-a1e3-4df9-828e-95530661e27a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107758","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107758 — The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…","description":"The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we…","indicators":{"cves":["CVE-2026-107758"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:24.003Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/colibri-page-builder/trunk/extend-builder/assets/static/colibri.js#L205","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/colibri-page-builder/trunk/extend-builder/assets/static/colibri.js#L57","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/colibri-page-builder/trunk/extend-builder/filters/svg-kses.php#L4","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/colibri-page-builder/trunk/extend-builder/filters/svg-kses.php#L68","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/colibri-page-builder/trunk/extend-builder/filters/svg-kses.php#L82","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ccae5cbd-cfe6-48b3-8bcd-0b08ceb94680?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109207","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109207 — The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plu…","description":"The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media:thumbnail@url' parameter in all versions up to, and including, 5.2.11 due to insufficient input sanitization and output es…","indicators":{"cves":["CVE-2026-109207"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:26.583Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://downloads.wordpress.org/plugin/feedzy-rss-feeds.5.2.12.zip","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.11/includes/abstract/feedzy-rss-feeds-admin-abstract.php#L2134","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.11/includes/admin/feedzy-rss-feeds-import.php#L1241","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.11/includes/admin/feedzy-rss-feeds-import.php#L2951","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.11/includes/admin/feedzy-rss-feeds-import.php#L3413","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.2.11/includes/admin/feedzy-rss-feeds-import.php#L989","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ab1d8bcb-688a-4763-970a-c960925cf0b6?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109990","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109990 — The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vul…","description":"The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for un…","indicators":{"cves":["CVE-2026-109990"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:26.860Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/flying-scripts/tags/1.2.4/html-rewrite.php#L36","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/flying-scripts/tags/1.2.4/html-rewrite.php#L64","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/flying-scripts/tags/1.2.4/lib/dom-parser.php#L2112","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/flying-scripts/tags/1.2.4/lib/dom-parser.php#L2207","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/flying-scripts/tags/1.2.4/lib/dom-parser.php#L2226","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/flying-scripts/tags/1.2.4/lib/dom-parser.php#L497","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3737597%40flying-scripts&new=3737597%40flying-scripts","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0ddc518c-02a0-46a5-93e9-0d92a045b35b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111445","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111445 — Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condit…","description":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing. Applications relying on scopes for ownership…","indicators":{"cves":["CVE-2026-111445"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:30.563Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-2qh9-qcxq-f8qc","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111446","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111446 — Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients…","description":"Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in development. Before 4.1.2 these tools have no local-access restriction; in 4.1.2 the restriction trusts client-supplied headers without checkin…","indicators":{"cves":["CVE-2026-111446"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:30.763Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-6v6c-p375-vxw9","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111447","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111447 — Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking…","description":"Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own parent can update and reassign another parent's hasMany or hasOne rows, or delete them when allowDelete=tr…","indicators":{"cves":["CVE-2026-111447"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:30.960Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-6979-65wv-7pxq","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111451","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111451 — Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and packag…","description":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintende…","indicators":{"cves":["CVE-2026-111451"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:31.667Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-cghp-86c6-6fjc","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93953","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-93953 — The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injectio…","description":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient prepara…","indicators":{"cves":["CVE-2026-93953"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:43.143Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/backuply/tags/1.5.7/backup_ins.php#L140","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/backuply/tags/1.5.7/backup_ins.php#L592","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/backuply/tags/1.5.7/restore_ins.php#L2247","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/backuply/tags/1.5.7/restore_ins.php#L2255","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3723257/backuply","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/202a2d02-a069-43d1-9ebe-59828e828c03?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97339","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97339 — The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Sit…","description":"The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all versions up to, and including, 7.5.5 due to insufficient input sanitization and output escaping. This makes it possible for una…","indicators":{"cves":["CVE-2026-97339"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:44.817Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.5.5/class-cookie-blocker.php#L458","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.5.5/class-cookie-blocker.php#L828","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.5.5/integrations/plugins/yotu-wp.php#L18","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/complianz-gdpr/tags/7.5.5/integrations/plugins/yotu-wp.php#L7","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743098/complianz-gdpr/trunk/integrations/plugins/yotu-wp.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3c12e65c-eedf-4fc2-977a-7a07219ee1c2?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103895","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103895 — The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to A…","description":"The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the `mo_by_pass_login()` function. This is due to `mo_delay_otp_process()` short-circuiting the authentication flow before password val…","indicators":{"cves":["CVE-2026-103895"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:28.333Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/miniorange-otp-verification/tags/5.5.7/handler/forms/class-wploginform.php#L1050","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-otp-verification/tags/5.5.7/handler/forms/class-wploginform.php#L1170","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-otp-verification/tags/5.5.7/handler/forms/class-wploginform.php#L1519","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-otp-verification/tags/5.5.7/handler/forms/class-wploginform.php#L1573","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-otp-verification/tags/5.5.7/handler/forms/class-wploginform.php#L511","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-otp-verification?rev=3741261","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3733803/miniorange-otp-verification/trunk/handler/forms/class-wploginform.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a3a7097-e184-40d0-9c26-7c5638c937a5?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107659","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107659 — The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sensitiv…","description":"The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.11 via the 'id (post ID in /wp-json/wp/v2/modula-gallery/{id}) or none for collection route' parameter. This makes it possible for unau…","indicators":{"cves":["CVE-2026-107659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:28.710Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/modula-best-grid-gallery/","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/modula-best-grid-gallery/tags/3.0.11/includes/admin/cpt/class-modula-cpt.php#L141","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/modula-best-grid-gallery/tags/3.0.11/includes/admin/cpt/class-modula-cpt.php#L189","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/modula-best-grid-gallery/tags/3.0.11/includes/admin/cpt/class-modula-cpt.php#L209","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3729079/modula-best-grid-gallery/trunk/includes/admin/cpt/class-modula-cpt.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ea70ffaf-b78b-4550-b334-d105f25b3f61?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107746","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107746 — The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to author…","description":"The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.16.0.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticate…","indicators":{"cves":["CVE-2026-107746"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:28.837Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://downloads.wordpress.org/plugin/funnel-builder.3.17.0.zip","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/funnel-builder/tags/3.16.0.5/modules/thankyou-pages/class-wffn-thank-you-wc-pages.php#L429","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/funnel-builder/tags/3.16.0.5/modules/thankyou-pages/includes/class-wfty-data.php#L286","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/funnel-builder/tags/3.16.0.5/modules/thankyou-pages/includes/class-wfty-data.php#L318","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/funnel-builder/tags/3.16.0.5/modules/thankyou-pages/includes/class-wfty-data.php#L328","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc9883b7-ea99-41e4-adf6-a3988f616a3f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109221","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109221 — The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to ar…","description":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Repr…","indicators":{"cves":["CVE-2026-109221"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:29.227Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/groundhoggwp/groundhogg/commit/e319e4a849bfbb07cccfbac8558ad6bf07a7fdc0","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/admin/tools/tools-page.php#L575","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/admin/tools/tools-page.php#L602","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/includes/background/import-contacts.php#L200","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/includes/classes/traits/file-box.php#L85","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/includes/classes/traits/file-box.php#L94","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/includes/functions.php#L2872","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/includes/functions.php#L8045","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/includes/main-roles.php#L583","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/groundhogg/tags/4.9.3/includes/utils/files.php#L323","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3744461/groundhogg/trunk/includes/classes/traits/file-box.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fb5100ac-cfe6-4e91-9349-6e8efa850147?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109400","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109400 — The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege…","description":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via `add_management_page()` using a role name returned by `InstaWP_Setting::get_allowed_r…","indicators":{"cves":["CVE-2026-109400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:29.350Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.4.1/admin/class-instawp-admin.php#L153","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.4.1/includes/apis/class-instawp-rest-api.php#L663","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.4.1/includes/class-instawp-hooks.php#L194","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.4.1/includes/class-instawp-setting.php#L186","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.4.1/includes/class-instawp-setting.php#L91","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/instawp-connect/tags/0.1.4.1/includes/functions.php#L1041","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743786/instawp-connect/trunk/includes/class-instawp-setting.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/925b009e-3aeb-496d-8218-6ea5dc9d9989?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110590","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110590 — The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all version…","description":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access any order…","indicators":{"cves":["CVE-2026-110590"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:29.973Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/krokedil/klarna-payments-for-woocommerce/compare/4.13.3...f5362605a9901b7f9264cfa3b22fd782a7a3097b","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/klarna-payments-for-woocommerce/tags/4.13.3/classes/class-kp-assets.php#L159","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/klarna-payments-for-woocommerce/tags/4.13.3/classes/class-kp-assets.php#L185","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/klarna-payments-for-woocommerce/tags/4.13.3/classes/class-kp-assets.php#L198","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/klarna-payments-for-woocommerce/tags/4.13.3/classes/class-kp-assets.php#L204","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3740915/klarna-payments-for-woocommerce/trunk/classes/class-kp-assets.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c3abb96e-6ee2-4992-a122-9f661da9a4d6?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111114","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111114 — The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is v…","description":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the `/?reset-view` handler in `role_switcher_to_view_admin_as()` performs no nonce or ca…","indicators":{"cves":["CVE-2026-111114"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:30.350Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L265","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L287","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L302","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/nexter-extension/tags/4.7.11/include/panel-settings/extensions/nexter-ext-view-admin-role.php#L51","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3740891/nexter-extension/trunk/include/panel-settings/extensions/nexter-ext-view-admin-role.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ae86441d-5a95-45a7-869a-9e7872365a1f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100186","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100186 — The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugi…","description":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Field in all versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes it…","indicators":{"cves":["CVE-2026-100186","CVE-2026-107748","CVE-2026-109447"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:02.317Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/features/email-confirmation/class-email-confirmation.php#L100","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/features/email-confirmation/class-email-confirmation.php#L99","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/features/email-confirmation/email-confirmation.php#L470","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/front-end/default-fields/first-name/first-name.php#L56","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3741133/profile-builder","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3741133/profile-builder/trunk/features/email-confirmation/class-email-confirmation.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f3f2ecdb-bbd0-4834-b731-88724ca0dfd7?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/features/functions.php#L582","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/features/functions.php#L585","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/features/functions.php#L593","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/front-end/default-fields/display-name/display-name.php#L81","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3741133/profile-builder/trunk/features/functions.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f466add-992b-46c7-a1cc-5c05d59f4bdf?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/admin/admin-functions.php#L400","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/features/email-confirmation/email-confirmation.php#L262","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/front-end/class-formbuilder.php#L736","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/front-end/class-formbuilder.php#L793","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/profile-builder/tags/4.0.3/front-end/register.php#L91","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3741133/profile-builder/trunk/features/email-confirmation/email-confirmation.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/88bfd754-e2ee-47c7-9af5-f31cbe993102?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103999","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103999 — The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scriptin…","description":"The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to, and including, 3.5.54 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…","indicators":{"cves":["CVE-2026-103999"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:03.927Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://downloads.wordpress.org/plugin/ultimate-addons-for-contact-form-7.zip","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.52/addons/database/database.php#L869","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.52/addons/database/database.php#L895","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.52/addons/database/database.php#L901","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.52/inc/functions.php#L1703","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3738548/ultimate-addons-for-contact-form-7/trunk/addons/database/database.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/29b9d978-f8b0-48f9-a10e-7e61a4f4a828?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104000","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104000 — The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting v…","description":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arb…","indicators":{"cves":["CVE-2026-104000"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:04.667Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.12.33/includes/class-appointment-model.php#L1490","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.12.33/includes/class-debug.php#L92","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.12.33/includes/class-utils.php#L716","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3746344/simply-schedule-appointments/trunk/includes/class-appointment-model.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3a8bd422-112c-43bc-a041-3c6eea27b790?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104932","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104932 — The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deser…","description":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain a…","indicators":{"cves":["CVE-2026-104932"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:05.590Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3730910%40search-regex%2Ftags%2F3.5.1&old=3729403%40search-regex%2Ftags%2F3.5","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb801c72-0e50-4df1-88cc-30f8037c6d3c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107764","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107764 — The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via t…","description":"The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_author_url)' parameter in all versions up to, and including, 1.6.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…","indicators":{"cves":["CVE-2026-107764","CVE-2026-111122"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:06.380Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/siteorigin/so-css/compare/1.6.7...1.6.8","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/so-css/tags/1.6.6/js/inspector.js#L280","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/so-css/tags/1.6.6/so-css.php#L69","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/so-css/tags/1.6.6/so-css.php#L899","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b0ff9652-1b45-43d6-949a-92bfeaee96d3?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/so-css/tags/1.6.7/js/inspector.js#L276","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/so-css/tags/1.6.7/js/inspector.js#L280","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/97742c7c-4957-4597-9cc0-c9594e8c8482?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109232","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109232 — The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress i…","description":"The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln[<checkout-field-key>]' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This…","indicators":{"cves":["CVE-2026-109232"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:06.790Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/salon-booking-system/tags/10.31.9/src/SLN/Action/Init.php#L645","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/salon-booking-system/tags/10.31.9/src/SLN/Form.php#L321","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/salon-booking-system/tags/10.31.9/src/SLN/Shortcode/Salon/AbstractUserStep.php#L46","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/salon-booking-system/tags/10.31.9/src/SLN/Shortcode/Salon/DetailsStep.php#L179","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/salon-booking-system/tags/10.31.9/views/admin/_customer.php#L110","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/salon-booking-system/tags/10.31.9/views/admin/_customer.php#L116","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3742306%40salon-booking-system&new=3742306%40salon-booking-system","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7bc97a43-6d81-401d-8090-825c6127c4c8?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109513","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109513 — The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Anno…","description":"The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 3.3.3 due to insufficient i…","indicators":{"cves":["CVE-2026-109513"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:08.407Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/blocks/Blocks.php#L218","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Core/Rest/Popup.php#L55","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Extensions/PopupNotification/PopupNotification.php#L1119","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Extensions/WordPress/WPOrgReview.php#L295","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Features/ShortcodeInline.php#L148","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3746251%40notificationx%2Ftags%2F3.3.4&old=3720837%40notificationx%2Ftags%2F3.3.3","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cac6c4f3-ac60-45d6-a5ba-6708fc1491a4?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85659","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85659 — The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in al…","description":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the `update_cc_details()` AJAX handler forwards an attacker-supplied `username` parameter to ONTRAPORT via `api_call('update_c…","indicators":{"cves":["CVE-2026-85659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:11.493Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/pilotpress/tags/2.0.39/pilotpress.php?rev=3642310#L1029","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/pilotpress/tags/2.0.39/pilotpress.php?rev=3642310#L1099","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/pilotpress/tags/2.0.39/pilotpress.php?rev=3642310#L1690","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/pilotpress/tags/2.0.39/pilotpress.php?rev=3642310#L2380","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737004","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ceee48dd-72a7-49c3-90d5-7af1a30f9ecb?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89051","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-89051 — The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored C…","description":"The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in versions up to, and including, 7.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…","indicators":{"cves":["CVE-2026-89051"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:12.167Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3745418%40hide-my-wp%2Ftags%2F7.0.13&old=3726247%40hide-my-wp%2Ftags%2F7.0.12","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/94724ff1-d3a7-4d9d-9423-a0e795360c95?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95686","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95686 — The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights…","description":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and outpu…","indicators":{"cves":["CVE-2026-95686","CVE-2026-95809"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:12.963Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.svn.wordpress.org/opti-behavior/","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.1/admin/class-opti-behavior-heatmap-ajax-handler.php#L1652","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.1/admin/class-opti-behavior-heatmap-ajax-handler.php#L3455","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.1/admin/class-opti-behavior-heatmap-post-metabox.php#L1389","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.1/assets/js/metabox-analytics.js#L553","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.1/public/class-opti-behavior-heatmap-frontend.php#L905","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3738510/opti-behavior/trunk/assets/js/metabox-analytics.js","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41f6939d-d87a-47e5-979f-2cad021c6e81?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.0/admin/class-opti-behavior-heatmap-ajax-handler.php#L1603","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.0/admin/class-opti-behavior-heatmap-ajax-handler.php#L2656","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.0/admin/class-opti-behavior-heatmap-post-metabox.php#L1498","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.0/assets/js/metabox-analytics.js#L668","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/opti-behavior/tags/1.9.0/includes/class-opti-behavior-heatmap-session.php#L369","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6c631593-4857-46c8-80b3-d028524cb86c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96570","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96570 — The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Sc…","description":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker…","indicators":{"cves":["CVE-2026-96570"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:13.630Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.66/admin_section/common-function.php#L1874","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.66/admin_section/common-function.php#L5158","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.66/modules/reviews/class-saswp-reviews-admin.php#L159","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.66/modules/reviews/class-saswp-reviews-admin.php#L258","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.66/modules/reviews/class-saswp-reviews-form.php#L170","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/schema-and-structured-data-for-wp/tags/1.66/modules/reviews/class-saswp-reviews-service.php#L126","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3740790%40schema-and-structured-data-for-wp&new=3740790%40schema-and-structured-data-for-wp","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1285322f-be3a-4015-b96d-79589a0897c8?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104715","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104715 — A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege esc…","description":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount…","indicators":{"cves":["CVE-2026-104715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:08.090Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-104715","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545023","label":"secalert@redhat.com","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/35","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107768","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107768 — The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulner…","description":"The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.3.7 due to insufficient input sanitization and output escaping. This makes it possible for unaut…","indicators":{"cves":["CVE-2026-107768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:09.103Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.7/includes/class-translation-render.php#L1355","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.7/includes/class-translation-render.php#L1655","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/translatepress-multilingual/tags/3.3.7/includes/class-translation-render.php#L835","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3744262/translatepress-multilingual/trunk/includes/class-translation-render.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5e9733d3-4097-4785-947c-db90a38795b3?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109193","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109193 — The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnera…","description":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output…","indicators":{"cves":["CVE-2026-109193","CVE-2026-109388"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:09.417Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/hivepress/hivepress/pull/375/changes/60df383473ff4b7a85f24b06895ec236edf20c9d","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/components/class-attribute.php#L1199","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/components/class-attribute.php#L1293","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/controllers/class-user.php#L292","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/fields/class-field.php#L572","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/fields/class-text.php#L197","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/fields/class-text.php#L214","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3747070/hivepress/trunk/includes/fields/class-field.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d2c3752b-0d2f-402d-bdbf-fb3fd76cf558?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://github.com/hivepress/hivepress/pull/374/changes/508b1766beb79949ab22dd4a163fafadb4c63e7d","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/assets/js/common.js#L1278","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/blocks/class-form.php#L89","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/components/class-editor.php#L417","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hivepress/tags/1.7.32/includes/forms/class-form.php#L189","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3747070%40hivepress%2Ftags%2F1.8.0&old=3732142%40hivepress%2Ftags%2F1.7.32","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5d1937ae-d350-452c-b20e-d85bc88dbe48?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110015","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110015 — The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity…","description":"The Salon Booking System  WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into…","indicators":{"cves":["CVE-2026-110015"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.470Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/755ad5f7-44bb-45a9-9de2-f280586deaa3/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110135","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110135 — The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-tim…","description":"The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-time-password verification attempts, because the attempt limit is tracked against a value the client itself supplies and can change freely, allowing an unauthenticated attacker to bypass the limit and br…","indicators":{"cves":["CVE-2026-110135"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.683Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/73f0e85d-c145-4048-9fbd-20308d163b87/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110701","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110701 — The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting…","description":"The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CalendarTitle' parameter in all versions up to, and including, 1.4.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec…","indicators":{"cves":["CVE-2026-110701"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:11.643Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/DC_MultiViewCal/src/Plugins/jquery.calendar.js#L2689","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/cp-multi-view-calendar.php#L32","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/php/datafeed.php#L23","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/php/datafeed.php#L340","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cp-multi-view-calendar/tags/1.4.42/php/datafeed.php#L89","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3748683/cp-multi-view-calendar/trunk/DC_MultiViewCal/src/Plugins/jquery.calendar.js","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/log/cp-multi-view-calendar/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12f2d3d3-4cc1-4569-9183-62f4841e72f7?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-18551","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-18551 — Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to…","description":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API…","indicators":{"cves":["CVE-2026-18551","CVE-2026-18795","CVE-2026-16251","CVE-2026-16453","CVE-2026-18223","CVE-2026-18256","CVE-2026-18560","CVE-2026-18799","CVE-2026-19076","CVE-2026-19621"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:12.260Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://mattermost.com/security-updates","label":"responsibledisclosure@mattermost.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92115","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92115 — The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all…","description":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the `value` parameter of the `update-photo` AJAX action. This is due to insufficient shell escaping within the `wppa_image_magick_a()` function, where th…","indicators":{"cves":["CVE-2026-92115"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:13.907Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://downloads.wordpress.org/plugin/wp-photo-album-plus.9.3.02.003.zip","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/9.3.01.003/wppa-ajax.php#L2211","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/9.3.01.003/wppa-ajax.php#L2223","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/9.3.01.003/wppa-ajax.php#L2557","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/9.3.01.003/wppa-photo-files.php#L859","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/9.3.01.003/wppa-photo-files.php#L874","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fc663d68-ca52-4012-847f-09817c121890?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92553","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92553 — The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to…","description":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does not…","indicators":{"cves":["CVE-2026-92553"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:14.150Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/yaysmtp/tags/2.7.7/includes/Helper/EmailLogAttachments.php#L106","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/yaysmtp/tags/2.7.7/includes/Helper/EmailLogAttachments.php#L178","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/yaysmtp/tags/2.7.7/includes/Helper/EmailLogAttachments.php#L542","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/yaysmtp/tags/2.7.7/includes/Helper/EmailLogAttachments.php#L549","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/yaysmtp/tags/2.7.7/includes/Helper/Utils.php#L814","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/yaysmtp/tags/2.7.7/includes/PluginCore.php#L37","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3739875/yaysmtp/trunk/includes/Helper/EmailLogAttachments.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4abbf148-4648-440c-8a82-cf68bf051fbe?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97296","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97296 — Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allo…","description":"Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.","indicators":{"cves":["CVE-2026-97296"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:14.693Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/gravityforms/vulnerability/wordpress-gravity-forms-plugin-3-1-1-php-object-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97640","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-97640 — The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance C…","description":"The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Simple HTML DOM Parser Noise-Key Restoration (mXSS) in all versions up to, and including, 1.1.9…","indicators":{"cves":["CVE-2026-97640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:14.823Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wpconsent-cookies-banner-privacy-suite/tags/1.1.9/includes/class-wpconsent-cookie-blocking.php#L107","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpconsent-cookies-banner-privacy-suite/tags/1.1.9/includes/class-wpconsent-cookie-blocking.php#L222","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpconsent-cookies-banner-privacy-suite/tags/1.1.9/lib/simplehtmldom/class-wpconsent-simple-html-dom.php#L2135","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpconsent-cookies-banner-privacy-suite/tags/1.1.9/lib/simplehtmldom/class-wpconsent-simple-html-dom.php#L2236","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpconsent-cookies-banner-privacy-suite/tags/1.1.9/lib/simplehtmldom/class-wpconsent-simple-html-dom.php#L466","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3734401/wpconsent-cookies-banner-privacy-suite/trunk/lib/simplehtmldom/class-wpconsent-simple-html-dom.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3734409%40wpconsent-cookies-banner-privacy-suite&old=3676065%40wpconsent-cookies-banner-privacy-suite","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e92b4189-bd07-4d29-8fe1-e9de60107e70?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75903","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-75903 — The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up…","description":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet g…","indicators":{"cves":["CVE-2026-75903"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T08:17:13.513Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3719370/vulnity/trunk/includes/class-static-security.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3719373%40vulnity%2Ftags%2F1.4.4&old=3717813%40vulnity%2Ftags%2F1.4.3","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/5574a52f-cec8-4f79-a3a7-5c13272e5e17?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87111","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-87111 — The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin…","description":"The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Referer Header in all versions up to, and including, 6.2.9 due to insufficient input sanitization and output escaping. This m…","indicators":{"cves":["CVE-2026-87111"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T08:17:13.650Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://wpuserregistration.com/changelog/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/493ac933-f2b3-487b-8fc7-af2df9b0d460?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109224","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109224 — The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions,…","description":"The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitization a…","indicators":{"cves":["CVE-2026-109224"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:04.113Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/surecart/tags/4.9.4/app/src/BlockLibrary/BlockServiceProvider.php#L100","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/surecart/tags/4.9.4/app/src/BlockLibrary/BlockServiceProvider.php#L152","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/surecart/tags/4.9.4/app/src/Support/kses.json#L216","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/surecart/tags/4.9.4/dist/components/esm/sc-cart-loader.entry.js#L33","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3742278%40surecart&new=3742278%40surecart","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4aa247ff-fbc3-48e3-8e90-e3f8cdf5d97f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111311","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111311 — The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Au…","description":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-l…","indicators":{"cves":["CVE-2026-111311"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:04.250Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Core/Services/AttachmentService.php#L112","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Core/Services/AttachmentService.php#L446","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Modules/Support/Rest/Controllers/RestPortalController.php#L574","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/doublescale/tags/1.4.6/includes/Modules/Support/Rest/Controllers/RestPortalController.php#L622","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0feed03e-fedf-4443-94e0-fbb2c8baba71?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14177","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-14177 — Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure…","description":"Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting.\n\nThis issue affects ikas E-Commerce Infrastructure: through 2026-07-13.","indicators":{"cves":["CVE-2026-14177"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:04.533Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1348","label":"iletisim@usom.gov.tr","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92766","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92766 — The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL…","description":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer…","indicators":{"cves":["CVE-2026-92766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:04.963Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vendor/appsbd-wp/appsbd-lite/appsbd_lite/v5/core/class-basemodel.php#L2877","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vendor/appsbd-wp/appsbd-lite/appsbd_lite/v5/core/class-basemodel.php#L741","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vendor/appsbd-wp/appsbd-lite/appsbd_lite/v5/core/class-querybuilder.php#L150","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vitepos_lite/api/v1/class-pos-vendor-api.php#L64","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.5.1/vitepos_lite/api/v1/class-pos-vendor-api.php#L79","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3700375%40vitepos-lite&new=3700375%40vitepos-lite","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7549e2f1-1ba9-4cd4-b2c2-6812d48e1590?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96768","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96768 — The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content…","description":"The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Email Log Body in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…","indicators":{"cves":["CVE-2026-96768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:18:05.863Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://gosmtp.net/blog/gosmtp-1-2-4-launched/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1e91e58d-a7b8-4d86-8c2d-9baaccb3e953?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109119","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109119 — Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in R…","description":"Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.","indicators":{"cves":["CVE-2026-109119"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T11:17:00.927Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://gitlab.com/ikus-soft/rdiffweb","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ikus-soft/rdiffweb/-/commit/4ce35fc2d23ac1cc789186f32bf76603b2eddeb3","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ikus-soft/rdiffweb/-/commit/b529adf2c13a210d10aaf56325de4d3fb2428abe","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105959","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105959 — A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocat…","description":"A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted max_encoders v…","indicators":{"cves":["CVE-2026-105959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:16:31.733Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-105959","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554008","label":"secalert@redhat.com","domainType":"other"},{"url":"https://gitlab.freedesktop.org/spice/spice/-/merge_requests/253","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107648","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107648 — The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Si…","description":"The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action (also function, plugin, post_type, post_status, ids, loggedout, and POST post_title)' parameter in all versions up to, and including, 1.1.5 due to insufficient input sanit…","indicators":{"cves":["CVE-2026-107648"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:16:32.053Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/activitytime/trunk/application/controllers/Actt_current_active.php#L104","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/activitytime/trunk/application/views/actt_current_active/index.php#L244","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/activitytime/trunk/includes/class-activitytime-tracker.php#L160","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/activitytime/trunk/includes/helper-functions.php#L340","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/activitytime/trunk/vendor/Winter_MVC/core/helpers.php#L1139","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9edc25d5-10a0-4d5c-aa29-41fad5e29ae9?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111391","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111391 — SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allo…","description":"SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoin…","indicators":{"cves":["CVE-2026-111391"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:16:33.197Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/sgl-project/sglang","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1309-L1320","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1380-L1401","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/44188","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sglang-0.5.10-through-0.5.22-code-injection-via-debug-dumper-filter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105958","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105958 — A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from…","description":"A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation, allowing a malicious authenticated SPICE client during VM live migration to read arbitrary heap memory or trigger heap corruption via out-of…","indicators":{"cves":["CVE-2026-105958"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:53.480Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-105958","label":"secalert@redhat.com","domainType":"other"},{"url":"https://gitlab.freedesktop.org/spice/spice/-/merge_requests/257","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107564","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107564 — An unauthenticated remote attacker may use an allocation of resources without limits or throttling w…","description":"An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of service.","indicators":{"cves":["CVE-2026-107564"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:54.013Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://gocsaf.github.io/.well-known/csaf/white/2026/gocsaf-2026-001.json","label":"info@cert.vde.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111396","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111396 — Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-ma…","description":"Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Post Manager: from n/a through 4.5.6.","indicators":{"cves":["CVE-2026-111396"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:55.497Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/advanced-post-manager/vulnerability/wordpress-advanced-post-manager-plugin-4-5-6-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63618","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-63618 — Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnera…","description":"Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin.\n\n\n\nThis issue affects Apache Kylin: from 4 through 5.0.4.\n\n\n\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.","indicators":{"cves":["CVE-2026-63618"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:57.127Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://lists.apache.org/thread.html/5zrg002omkynt3hsjobvkp61yznr6qg3","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/1","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-68571","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-68571 — Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special par…","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. \nImpact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.…","indicators":{"cves":["CVE-2026-68571"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:57.587Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://lists.apache.org/thread.html/vmjozo864ss37c1jbdlld9m6d84ndpbs","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/5","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111413","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111413 — Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-…","description":"Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8.","indicators":{"cves":["CVE-2026-111413"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:23.710Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/athemeart-theme-helper/vulnerability/wordpress-athemeart-theme-helper-plugin-1-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101021","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-101021 — MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted…","description":"MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.","indicators":{"cves":["CVE-2026-101021"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:16:58.837Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105273","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105273 — MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no f…","description":"MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input.","indicators":{"cves":["CVE-2026-105273"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:03.993Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105667","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105667 — In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authen…","description":"In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this.","indicators":{"cves":["CVE-2026-105667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:04.260Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106705","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-106705 — ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role managem…","description":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither v…","indicators":{"cves":["CVE-2026-106705"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:04.767Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/elunez/eladmin-mp","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106705.md","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107621","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107621 — JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.","description":"JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.","indicators":{"cves":["CVE-2026-107621"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:05.003Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88755","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88755 — Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers decla…","description":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.","indicators":{"cves":["CVE-2026-88755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:33.537Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"http://zai.com","label":"cve@mitre.org","domainType":"other"},{"url":"http://zcode.com","label":"cve@mitre.org","domainType":"other"},{"url":"https://gist.github.com/lkloliver/aac8dcf8a53fc4b3c1b0a5dfbf36ef68","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/lkloliver/poc/tree/main/CVE-2026-88755","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95183","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-95183 — An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attacker…","description":"An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content.","indicators":{"cves":["CVE-2026-95183"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:37.050Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"http://deepseek.com","label":"cve@mitre.org","domainType":"other"},{"url":"https://gist.github.com/lkloliver/c54c0cc91e1ec4f16b538e0d8a1411b6","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102923","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102923 — SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0,…","description":"SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts do not validate destinations supplied in custom AI service settings. An authenticated user saves a cust…","indicators":{"cves":["CVE-2026-102923","CVE-2026-92263"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:16:52.707Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/CodeWithCJ/SparkyFitness/commit/0b43a37003a3fbedf4e38058130460fd4707fe29","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/CodeWithCJ/SparkyFitness/releases/tag/v1.6.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/CodeWithCJ/SparkyFitness/security/advisories/GHSA-rmxj-43xh-mcm3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/CodeWithCJ/SparkyFitness/commit/724730b6de5f2ca46856e0cbf113cc34f9c0689d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/CodeWithCJ/SparkyFitness/security/advisories/GHSA-jh96-mj9m-x796","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102941","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102941 — The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering a…","description":"The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url[:nPath] before the len(url) >= nPath guard. A short destination causes a slice-bounds panic when the…","indicators":{"cves":["CVE-2026-102941"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:16:52.937Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/gomarkdown/markdown/commit/61af6e1e69710c5ca13cfbaaaa1bc11bc763a8a9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gomarkdown/markdown/security/advisories/GHSA-cv23-7vc5-jfh7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-46471","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-46471 — An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the…","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents.","indicators":{"cves":["CVE-2026-46471","CVE-2026-46472"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:11.513Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0004.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0002.html","label":"cve@mitre.org","domainType":"other"},{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0018.html","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-48503","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-48503 — libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS,…","description":"libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/iso_mms/server/mms_file_service.c accepts an out-of-range initialPosition in fileOpen and stores it in the file-r…","indicators":{"cves":["CVE-2026-48503","CVE-2026-48741","CVE-2026-57446","CVE-2026-68906","CVE-2026-68907","CVE-2026-68908"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:11.793Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/mz-automation/libiec61850/commit/bba5bf2fab6d7ac88f5accb4c9e90b123436ebf2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/security/advisories/GHSA-4c8m-jr3r-h8j2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/commit/7c15310405def00cac628ebde4ce1404bfb8a411","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/security/advisories/GHSA-8mfr-hq64-9w33","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/commit/d86b4a9c7a903641819235e1678b18901518f3cd","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/security/advisories/GHSA-cxgr-7v9h-fj9p","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/commit/2edf2a12bf0ced6a2ac595862e3e873814983f7f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/security/advisories/GHSA-f7xm-q62q-22cx","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/commit/062062daf4cb50c7aa76e01d6fb4d58fc9278a7d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7v2x-39mw-2979","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/commit/5b2a69f44256b8548927d8afdd7ac5f5381abe1e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7qg8-hm25-rv5v","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57486","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-57486 — pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlN…","description":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocument_createAttribute legitimat…","indicators":{"cves":["CVE-2026-57486"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:44.510Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/pupnp/pupnp/commit/4b2f775e3b98de3cfb096707bcde040c5562d9ec","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/releases/tag/release-2.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57487","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-57487 — pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Trans…","description":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httpparser.c to leave parser->content_length at zero while parser_parse_chunky_entity and parser_parse_chunky_body accumulate d…","indicators":{"cves":["CVE-2026-57487"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:44.663Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/pupnp/pupnp/commit/9ff9bc583ad8ee4ba022634434a7b71db9bd96e1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/releases/tag/release-2.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-gcj7-j9f7-q84c","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57488","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-57488 — pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_t…","description":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values great…","indicators":{"cves":["CVE-2026-57488"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:44.823Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/pupnp/pupnp/commit/de9602aef34ff722f3630d66c9be8eaa0aa9f012","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/releases/tag/release-2.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-g6c2-x4r9-352g","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-g6c2-x4r9-352g","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77630","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77630 — pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, pars…","description":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously calls getaddrinfo while parse_uri is processing attacker-supplied hostnames from inbound HTTP request targets in upnp/src/genlib/net/http/http…","indicators":{"cves":["CVE-2026-77630"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:21:03.187Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/pupnp/pupnp/commit/5dba8070b4d64d976f8e6fc13f1f301befebe7d2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/releases/tag/release-22.0.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-46ph-jff5-5h77","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://issues.oss-fuzz.com/issues/531780528","label":"security-advisories@github.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96424","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96424 — Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary u…","description":"Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus","indicators":{"cves":["CVE-2026-96424"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:22:52.560Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-unauthenticated-arbitrary-file-read-as-root-in-lomiri-download-manager","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items/18","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-59962","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-59962 — Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.…","description":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes unvalidated sort_order and order_field strings into Django ORM order_by() calls when an authenticated user supplies foreign-key traversal paths in recipe search, RecipeBook, o…","indicators":{"cves":["CVE-2026-59962","CVE-2026-59967","CVE-2026-59963","CVE-2026-59966","CVE-2026-59970","CVE-2026-61726"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:35.343Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/TandoorRecipes/recipes/commit/322696f618997e98f2d4c15ec64b9480735589f0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/commit/382a976cc79635edc30aef84cb2b2b72eb8afd3c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/commit/82fd4e00f1387a1c466489989f2e94487149f7f4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/releases/tag/2.6.10","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4x57-2q4q-xwpp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/commit/18e13a3493eb7cd7ce309009c5ed2faef5a86ef5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4vw7-c646-g23w","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/commit/8b4a4c06902d024609d7376b6c45f5ea4f9bed07","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-cqj3-64qw-4w52","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/commit/adc2732712819d7fe26a9f74f6b0271c1a9d87c3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-f2gw-c2c7-59v7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/commit/79e783578a5b198a988eb9b486ba19f93df4cfa4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-wq4h-2r8x-cv65","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/commit/3c5678f663e62e6ddf3d7df0b2bcc89ce2f52def","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/releases/tag/2.6.12","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-wjf3-fq5w-7j7w","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77474","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77474 — destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands…","description":"destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substitutions are recursively rescanned after an inner scan returns unterminated, producing exponential-time work. The affected sc…","indicators":{"cves":["CVE-2026-77474"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:50.390Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/Dicklesworthstone/destructive_command_guard/commit/ba16bdd074b045329dc0ca6ec9a08c44403cfe1b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Dicklesworthstone/destructive_command_guard/issues/189","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Dicklesworthstone/destructive_command_guard/releases/tag/v0.6.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Dicklesworthstone/destructive_command_guard/security/advisories/GHSA-4cfr-w3v5-w5j5","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-86008","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-86008 — Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf0366…","description":"Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another domain manager with greater privileges can reset passwords or obtain tokens for that account. This authorization failure al…","indicators":{"cves":["CVE-2026-86008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:51.753Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/Mailu/Mailu/commit/8577c929b4ade04d3cd4210cf036601abd793556","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Mailu/Mailu/issues/2685","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Mailu/Mailu/pull/4050","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Mailu/Mailu/security/advisories/GHSA-9pv5-rm76-3qwj","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102551","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102551 — Improper verification of the source of a communication channel in the IPv6 Router Advertisement hand…","description":"Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertise…","indicators":{"cves":["CVE-2026-102551"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:14.750Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-139-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.2","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-pjq5-fqrr-g6pv","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109587","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109587 — Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0…","description":"Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and write privileged kernel memory outside the regions assigned to it, via a buffer argument passed to an MPU system call.…","indicators":{"cves":["CVE-2026-109587"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:31.330Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-138-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V11.3.2","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Kernel/security/advisories/GHSA-pv9j-rq42-3fjc","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109588","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109588 — Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11…","description":"Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, under certain conditions, an unprivileged task on MPU-enabled builds to read or write privileged kernel memory beyond the…","indicators":{"cves":["CVE-2026-109588"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:31.457Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-138-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Kernel/releases/tag/V11.3.2","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Kernel/security/advisories/GHSA-qf4j-6f5j-876g","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111605","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111605 — Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows…","description":"Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload, rea…","indicators":{"cves":["CVE-2026-111605"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:39.490Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/dromara/Jpom","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dromara/Jpom/blob/v2.11.12/modules/server/src/main/java/org/dromara/jpom/controller/ssh/SshFileController.java#L44-L65","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/jpom-ssh-file-cross-workspace-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/jpom-through-2.11.12-cross-workspace-authorization-bypass-via-sshfilecontroller","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/jpom-ssh-file-cross-workspace-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111606","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111606 — Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authent…","description":"Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbitrary persons by calling the mergeSpecifiedPersons account RPC. Attackers knowing two person UUIDs can graft attacker-controlled unverified social ids onto a victim person, th…","indicators":{"cves":["CVE-2026-111606"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:39.647Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/hcengineering/platform/blob/v0.7.432/server/account/src/operations.ts#L2921-L2939","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/hcengineering/platform/commit/afe11faec1b56f278c0882355a69b08cff1eebd9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/hcengineering/platform/issues/10914","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/huly-platform-merge-specified-persons-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/huly-platform-through-0.7.432-account-takeover-via-mergespecifiedpersons-rpc","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111607","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111607 — Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenti…","description":"Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel configuration by supplying a victim infoId to MchPayInterfaceConfigController.saveOrUpdate. Attackers holding the defau…","indicators":{"cves":["CVE-2026-111607","CVE-2026-111608"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:39.813Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/jeequan/jeepay/blob/V3.2.9/jeepay-merchant/src/main/java/com/jeequan/jeepay/mch/ctrl/merchant/MchPayInterfaceConfigController.java#L146-L186","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/jeepay-mch-payconfig-write-and-division-receiver-delete-cross-merchant-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/jeepay-through-3.2.9-idor-via-post-api-mch-payconfigs","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/jeequan/jeepay/blob/V3.2.9/jeepay-merchant/src/main/java/com/jeequan/jeepay/mch/ctrl/division/MchDivisionReceiverController.java#L250-L259","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/jeepay-through-3.2.9-idor-via-delete-api-divisionreceivers-recordid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111612","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111612 — netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows una…","description":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the har…","indicators":{"cves":["CVE-2026-111612"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:40.533Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/qaiu/netdisk-fast-download","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/qaiu/netdisk-fast-download/blob/v0.4.8/web-service/src/main/java/cn/qaiu/lz/common/util/AuthParamCodec.java#L31","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/qaiu/netdisk-fast-download/blob/v0.4.8/web-service/src/main/java/cn/qaiu/lz/web/controller/ParserApi.java#L738-L752","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/netdisk-fast-download-randomauth-donated-credential-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/netdisk-fast-download-through-0.4.8-credential-disclosure-via-v2-randomauth","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/netdisk-fast-download-randomauth-donated-credential-disclosure","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111613","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111613 — AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote at…","description":"AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can supply a MySQL JDBC URL with allowLoadLoc…","indicators":{"cves":["CVE-2026-111613"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:40.680Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/alldatacenter/alldata","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/config/WebSecurityConfiguration.java","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/controller/JobDatasourceController.java#L131-L135","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/alldatacenter/alldata/blob/alldata-release-0.7.1/moat/studio/data-dts/service-data-dts/src/main/java/com/platform/admin/tool/query/BaseQueryTool.java#L107-L124","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/alldata-dts-unauthenticated-jdbc-url-injection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/alldata-through-0.7.1-unauthenticated-jdbc-injection-via-jobjdbcdatasource-test","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111627","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111627 — HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER admi…","description":"HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while impersonating the protected ROOT_USER account. Attackers can log in via the loginas parameter and POST to /add/cron/, because the read-only flag is never chec…","indicators":{"cves":["CVE-2026-111627"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:42.760Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/hestiacp/hestiacp/blob/1.10.4/web/add/cron/index.php#L11-L70","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/hestiacp/hestiacp/blob/1.10.4/web/inc/policies.php#L3-L14","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/hestiacp/hestiacp/commit/1af7e057cd5ad2ea945acba6c9932ea1a1802c24","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/hestiacp/hestiacp/releases/tag/1.10.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/hestiacp/hestiacp/security/advisories/GHSA-vp7q-fjv5-5vg8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/hestiacp-before-1.10.5-protected-admin-bypass-via-cron-job-creation","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/hestiacp/hestiacp/security/advisories/GHSA-vp7q-fjv5-5vg8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111633","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111633 — ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated atta…","description":"ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize endpoin…","indicators":{"cves":["CVE-2026-111633"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:43.607Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/SeriaWei/ZKEACMS/blob/v4.4/src/ZKEACMS/Api/JwtBearerDefaults.cs#L14-L19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/SeriaWei/ZKEACMS/blob/v4.4/src/ZKEACMS/BuilderAuthentication.cs#L41-L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/SeriaWei/ZKEACMS/issues/531","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/zkeacms-hardcoded-jwt-signing-key-admin-auth-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/zkeacms-through-4.4-authentication-bypass-via-hard-coded-jwt-signing-key","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111634","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111634 — Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated view…","description":"Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeDatasource. Attackers can supply crafted Numeric or String placeholder values that bypass the broken SqlDetect guard to read…","indicators":{"cves":["CVE-2026-111634"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:43.750Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/helicalinsight/helicalinsight/blob/v7.0.0/server/core/src/main/java/com/helicalinsight/datasource/EfwdQueryProcessor.java#L220-L235","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/helicalinsight-efwd-parameter-sqli","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/helical-insight-through-7.0.0-sql-injection-via-executedatasource","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111636","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111636 — OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthen…","description":"OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenant_demo' to gain full tenan…","indicators":{"cves":["CVE-2026-111636"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:44.010Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/OpenBMB/StaffDeck/blob/v0.5.6/backend/app/config.py#L10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OpenBMB/StaffDeck/blob/v0.5.6/backend/app/security/auth.py#L96-L98","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/staffdeck-default-token-signing-secret-auth-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/openbmb-staffdeck-through-0.5.6-authentication-bypass-via-hard-coded-session-secret","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111638","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111638 — sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key…","description":"sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted backend private SSH keys. Attackers can request predictable key names like 'default' or 'host' to retrieve private keys and…","indicators":{"cves":["CVE-2026-111638"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:44.297Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/moul/sshportal/blob/v1.19.5/pkg/bastion/shell.go#L1513-L1584","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/sshportal-key-show-privkey-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sshportal-through-1.19.5-missing-authorization-in-key-show-command-exposes-private-keys","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111639","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111639 — bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_ta…","description":"bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's Goo…","indicators":{"cves":["CVE-2026-111639"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:44.447Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/mlogclub/bbs-go/blob/v4.4.6/internal/pkg/google/jwt.go#L55-L58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mlogclub/bbs-go/blob/v4.4.6/internal/services/third_user_service.go#L274-L293","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/bbs-go-google-one-tap-id-token-audience-confusion-account-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/bbs-go-through-4.4.6-account-takeover-via-google-one-tap-login","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111642","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111642 — FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py t…","description":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token keep…","indicators":{"cves":["CVE-2026-111642"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:44.877Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/fastapiadmin/FastapiAdmin/blob/v3.0/backend/app/config/setting.py#L67","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/fastapiadmin/FastapiAdmin/blob/v3.0/backend/app/core/dependencies.py#L72-L112","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/fastapiadmin-unauthenticated-autologin-and-hardcoded-jwt-secret","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fastapiadmin-through-3.0-hard-coded-jwt-secret-privilege-escalation","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/fastapiadmin-unauthenticated-autologin-and-hardcoded-jwt-secret","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111644","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111644 — Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauth…","description":"Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user dependency. Attackers can read audit logs with login IPs, server l…","indicators":{"cves":["CVE-2026-111644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:45.160Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/l429609201/misaka_danmu_server/blob/v2.8.9/src/api/ui/audit.py#L31-L66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/l429609201/misaka_danmu_server/blob/v2.8.9/src/api/ui/data_check.py#L116-L140","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/l429609201/misaka_danmu_server/blob/v2.8.9/src/api/ui/diagnostics.py#L156-L210","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/misaka-danmu-server-ui-api-missing-authentication","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/misaka-danmu-server-through-2.8.9-missing-authentication-on-api-ui-routes","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111650","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111650 — ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/…","description":"ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured instances. Attackers can POST to /api/wizard/storage to activate an attacker-controlled S3 or OpenList provider, redire…","indicators":{"cves":["CVE-2026-111650"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:46.047Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/HoshinoSuzumi/chronoframe","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/HoshinoSuzumi/chronoframe/blob/v1.0.0/server/api/wizard/storage.post.ts#L1-L26","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/chronoframe-unauthenticated-wizard-config-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/chronoframe-through-1.0.0-missing-authentication-via-setup-wizard-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/chronoframe-unauthenticated-wizard-config-takeover","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111662","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111662 — Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticat…","description":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata addresses through FetchLinkCardService, wh…","indicators":{"cves":["CVE-2026-111662","CVE-2026-111663"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:47.900Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/chaskiq/chaskiq/blob/2.0.3/app/controllers/oembed_controller.rb#L8-L11","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/chaskiq/chaskiq/blob/2.0.3/app/services/fetch_link_card_service.rb#L11-L40","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/chaskiq-unauthenticated-ssrf-oembed-url-upload","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/chaskiq-through-2.0.3-unauthenticated-ssrf-via-oembed-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/chaskiq/chaskiq/blob/2.0.3/app/controllers/graphql_controller.rb#L3-L33","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/chaskiq/chaskiq/blob/2.0.3/app/graphql/mutations/create_url_upload.rb#L29-L66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/chaskiq-through-2.0.3-ssrf-via-createurlupload-graphql-mutation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111671","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111671 — Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allow…","description":"Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id. Attackers can pass sequential ids to lifecycle endpoints in view_notebook.py, view_inferenceserving.p…","indicators":{"cves":["CVE-2026-111671"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:49.647Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/data-infra/cube-studio/blob/v2026.09.01/myapp/views/view_inferenceserving.py#L805-L915","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/data-infra/cube-studio/blob/v2026.09.01/myapp/views/view_notebook.py#L784-L873","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/data-infra/cube-studio/blob/v2026.09.01/myapp/views/view_serving.py#L184-L203","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/cube-studio-idor-expose-api-lifecycle","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cube-studio-through-2026.09.01-idor-via-notebook-and-serving-lifecycle-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111675","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111675 — Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulne…","description":"Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email verification codes, which are never invalidated or attempt-limited. Attackers who know a victim's phone or email can tri…","indicators":{"cves":["CVE-2026-111675"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:50.197Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/xiaochong0302/course-tencent-cloud/blob/v2.0.1/app/Services/Logic/Account/PasswordReset.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xiaochong0302/course-tencent-cloud/blob/v2.0.1/app/Services/Verify.php#L27-L73","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/ctc-verify-code-brute-force-account-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/course-tencent-cloud-through-2.0.1-verification-code-brute-force-account-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/ctc-verify-code-brute-force-account-takeover","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111680","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111680 — APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated…","description":"APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services an…","indicators":{"cves":["CVE-2026-111680"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:50.923Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/APIParkLab/APIPark","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/APIParkLab/APIPark/blob/v1.9.7-beta/module/permit/team/iml.go#L70-L78","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/APIParkLab/APIPark/blob/v1.9.7-beta/plugins/core/service.go#L16-L40","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/apipark-cross-team-service-app-authz-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/apipark-through-1.9.7-beta-cross-team-authorization-bypass-via-team-query-parameter","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/apipark-cross-team-service-app-authz-bypass","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111681","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111681 — EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-priv…","description":"EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the /api/users endpoints lack administrator role checks. Attackers can send POST, PUT, or DELETE requests to UserController to grant themselves ROLE_ADMIN, creat…","indicators":{"cves":["CVE-2026-111681"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:51.063Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/smartloli/EFAK","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/smartloli/EFAK/blob/v5.1.0/efak-web/src/main/java/org/kafka/eagle/web/controller/UserController.java#L218-L302","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/smartloli/EFAK/blob/v5.1.0/efak-web/src/main/java/org/kafka/eagle/web/security/config/WebSecurityConfig.java#L89-L93","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/efak-missing-admin-gate-user-management-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/efak-through-5.1.0-privilege-escalation-via-api-users-rest-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111684","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111684 — Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated wo…","description":"Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCer…","indicators":{"cves":["CVE-2026-111684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:51.477Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/absmach/magistrala","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/absmach/magistrala/blob/v1.0.0/certs/middleware/authorization.go#L97-L110","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/absmach/magistrala/blob/v1.0.0/certs/service.go#L136-L180","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/magistrala-certs-missing-workspace-scope-cross-tenant","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/magistrala-through-1.0.0-cross-tenant-authorization-bypass-in-certs-service","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111685","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111685 — IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote atta…","description":"IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path parameter to /WebResource/findresourcebynum. Attackers can append SQL after the LIMIT clause concatenated via QueryWrapper.last() to extract databas…","indicators":{"cves":["CVE-2026-111685","CVE-2026-111686"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:51.643Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/Thecosy/IceCMS","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Thecosy/IceCMS/blob/afd7a9f0d04a714e7c7e735e566c27f54b5d5201/IceCMS-ment/src/main/java/com/ttice/icewkment/controller/frontend/WebResourceController.java#L128-L134","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/icecms-webresource-webarticle-findbynum-limit-sqli","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/icecms-through-4.1.5-sql-injection-via-webresource-findresourcebynum","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Thecosy/IceCMS/blob/afd7a9f0d04a714e7c7e735e566c27f54b5d5201/IceCMS-ment/src/main/java/com/ttice/icewkment/controller/frontend/WebArticleController.java#L169-L175","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/icecms-through-4.1.5-sql-injection-via-webarticle-findarticlesbynum","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111691","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111691 — WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers…","description":"WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO header. Attackers reaching backend service ports directly, bypassing the gateway, can forge companyid and manager or adm…","indicators":{"cves":["CVE-2026-111691"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:52.493Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/wimoor-erp/wimoor/blob/ec86736beb1a3b9ca6ba0d1c48a1c415445b8dc4/wimoor-common/common-mvc/src/main/java/com/wimoor/common/mvc/filter/UserInfoFilter.java#L42-L51","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/wimoor-trusted-x-userinfo-header-tenant-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wimoor-through-commit-ec86736-authentication-bypass-via-forged-x-userinfo-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111695","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111695 — Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulner…","description":"Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id. Attackers can send foreign sequential ids to /datasource/detail, /listSchemaTable, /tableDeta…","indicators":{"cves":["CVE-2026-111695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:53.080Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/shaiwz/data-platform-open/blob/efeacd35e8450b7a084fa2134d292cd058cf605b/data-platform-open-web/src/main/java/cn/dataplatform/open/web/controller/source/DataSourceController.java#L84-L142","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shaiwz/data-platform-open/blob/efeacd35e8450b7a084fa2134d292cd058cf605b/data-platform-open-web/src/main/java/cn/dataplatform/open/web/service/datasource/impl/DataSourceServiceImpl.java#L300-L316","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/data-platform-open-datasource-cross-workspace-idor-and-hardcoded-aes-key","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/shaiwz-data-platform-open-through-commit-efeacd3-idor-in-datasource-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/data-platform-open-datasource-cross-workspace-idor-and-hardcoded-aes-key","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111700","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111700 — WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated use…","description":"WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en_US/eql, escaping the unsanitized EqlBuilder SQL interpolat…","indicators":{"cves":["CVE-2026-111700"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:53.780Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/WebVella/WebVella-ERP/blob/10315fe844198b8620494f716ed75410cd54bfe6/WebVella.Erp.Web/Controllers/WebApiController.cs#L64-L74","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/WebVella/WebVella-ERP/blob/10315fe844198b8620494f716ed75410cd54bfe6/WebVella.Erp/Eql/EqlBuilder.Sql.cs#L580-L581","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/webvella-erp-eql-text-literal-sql-injection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.nuget.org/packages/WebVella.Erp/1.8.8","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/webvella-erp-through-1.8.8-sql-injection-via-eql-query-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/webvella-erp-eql-text-literal-sql-injection","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111701","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111701 — OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthent…","description":"OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthenticated attackers to access private bucket objects because /storage/v1/object/{bucketId}/{path} is treated as public for every HTTP method. Attackers knowing a tenant subdomain, bucket id and object pa…","indicators":{"cves":["CVE-2026-111701"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:53.930Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/OtterMind/Nubase/blob/v0.1.4/src/main/java/ai/nubase/auth/controller/storage/StorageObjectReadController.java#L68-L74","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OtterMind/Nubase/blob/v0.1.4/src/main/java/ai/nubase/auth/service/StorageService.java#L176-L200","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OtterMind/Nubase/blob/v0.1.4/src/main/java/ai/nubase/common/multitenancy/UnifiedMultiTenancyFilter.java#L363-L379","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/nubase-storage-private-object-unauth-download","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ottermind-nubase-through-0.1.4-missing-authentication-in-storage-object-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111702","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111702 — ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that al…","description":"ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/{id} or the knowledgebaseId parameter of POST…","indicators":{"cves":["CVE-2026-111702"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:54.080Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/sugarforever/chat-ollama/blob/6f4245a96b58ce8833a8c51d90d923b0e9814784/server/api/knowledgebases/%5Bid%5D.get.ts#L25-L34","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sugarforever/chat-ollama/blob/6f4245a96b58ce8833a8c51d90d923b0e9814784/server/api/models/chat/index.post.ts#L392-L427","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/chat-ollama-knowledge-base-cross-user-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/chatollama-through-commit-96c3ce5-idor-exposes-private-knowledge-bases","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/chat-ollama-knowledge-base-cross-user-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111706","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111706 — 99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportEx…","description":"99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing user…","indicators":{"cves":["CVE-2026-111706"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:54.663Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/vastxie/99AI","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vastxie/99AI/blob/v4.3.0/service/src/modules/chatLog/chatLog.controller.ts#L47-L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vastxie/99AI/blob/v4.3.0/service/src/modules/chatLog/chatLog.service.ts#L104-L155","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/99ai-chatlog-unauth-export-and-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/99ai-through-4.3.0-unauthenticated-information-disclosure-via-chatlog-exportexcel","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111710","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111710 — Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web…","description":"Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as on…","indicators":{"cves":["CVE-2026-111710"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.207Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2ad7fa2aff1/2026.10.15-netcore-nr256cn-basic-auth-null-deref.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-boa-web-server-null-pointer-dereference-dos","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111722","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111722 — LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that…","description":"LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, PUT and DELETE /admin/v1/projects/:id to…","indicators":{"cves":["CVE-2026-111722"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:56.823Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/app/http/controllers/admin/v1/projects_controller.go#L173-L198","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/app/models/projects/projects_utils.go#L11-L14","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/routes/admin.go#L26-L31","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/lingguo-drama-broken-access-control","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/lingguo-drama-through-commit-8a6924a-idor-via-admin-v1-projects-id-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/lingguo-drama-broken-access-control","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111723","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111723 — LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any…","description":"LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read every account's bcrypt hash, reset the bootstrap administrator…","indicators":{"cves":["CVE-2026-111723"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:56.980Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/app/http/controllers/admin/v1/admins_controller.go#L166-L198","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/app/models/admins/admins.go#L14","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LingGuoAI/LingGuo-Drama/blob/8a6924adf8142678919b4d9a08b9d60c49dcfbed/server/routes/admin.go#L244-L255","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/lingguo-drama-broken-access-control","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/lingguo-drama-through-commit-8a6924a-broken-access-control-via-admin-v1-admins-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-81452","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-81452 — Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violati…","description":"Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Denial of Service.","indicators":{"cves":["CVE-2026-81452"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:18:37.770Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000509086/dsa-2026-418-security-update-for-dell-alienware-command-center-6-x-for-a-least-privilege-violation-vulnerability","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102917","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102917 — IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.","indicators":{"cves":["CVE-2026-102917"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:01.273Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292422","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102607","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102607 — ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, t…","description":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events…","indicators":{"cves":["CVE-2026-102607"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:17.097Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/ZoneMinder/zoneminder/commit/548ed87d47a49c17b4c842f6fee8a08660deb427","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/605f962b7b6ba7f5780b3e6715b5418b8b2addca","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-7j62-cjxp-3cj5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-7j62-cjxp-3cj5","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102834","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-102834 — JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14,…","description":"JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint or…","indicators":{"cves":["CVE-2026-102834"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:17.563Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/bytedeco/javacv/commit/cd1977800b827beadf3c53c4032e57172845e0b4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/bytedeco/javacv/releases/tag/1.5.14","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/bytedeco/javacv/security/advisories/GHSA-rxjv-24xq-76wc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-30971","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-30971 — ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1…","description":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field into shell commands in PHP and Perl control paths when an authenticated user with monitor-create or monitor-edit permiss…","indicators":{"cves":["CVE-2026-30971"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:23.190Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/ZoneMinder/zoneminder/commit/419846c8750c3f45b9b8a1df8cd49c189a14dc03","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-g66m-77fq-79v9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-g66m-77fq-79v9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108374","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108374 — ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0,…","description":"ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status modification fail to enforce proper authorization checks. A low-privileged authenticated user can invoke state-changing whitelisted methods without required write, submit,…","indicators":{"cves":["CVE-2026-108374"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T21:17:19.600Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/frappe/erpnext/commit/547d82da563380a0644919173e00d0205f986d89","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/commit/86e94803629ea5668c2fc2d18afb5ca59fe2cf03","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/commit/a20fc4f9317ecc7d262625aea680c9a0cda98cef","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/releases/tag/v15.121.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/releases/tag/v16.34.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/security/advisories/GHSA-5wpj-6rvp-9ff7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111044","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111044 — Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525…","description":"Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-client certificate, but it did not require the presented certificate to be the exact enabled paired identity. Certificate tex…","indicators":{"cves":["CVE-2026-111044"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:17:20.610Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/LizardByte/Sunshine/commit/4d768847fcd88cc94ac745c4611715c67d7d67e1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LizardByte/Sunshine/releases/tag/v2026.906.222525","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LizardByte/Sunshine/security/advisories/GHSA-6jvv-jqr7-m6m3","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-49410","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-49410 — OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versi…","description":"OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login…","indicators":{"cves":["CVE-2026-49410"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:17:23.490Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/tinyhumansai/openhuman/pull/2331","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-62439","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-62439 — A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory…","description":"A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to…","indicators":{"cves":["CVE-2026-62439"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:17:24.440Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-62439","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554464","label":"secalert@redhat.com","domainType":"other"},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/16314","label":"secalert@redhat.com","domainType":"other"},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/16314","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-68498","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-68498 — StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory…","description":"StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object property name can consume while being parsed, independently of the much larger maxStringLength (default 100,000,000 characters) that bounds ordinary string values. For parsers bu…","indicators":{"cves":["CVE-2026-68498"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:17:25.183Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/FasterXML/jackson-core/blob/2.x/release-notes/VERSION-2.x","label":"36c7be3b-2937-45df-85ea-ca7133ea542c","domainType":"primary"},{"url":"https://github.com/FasterXML/jackson-core/blob/3.x/release-notes/VERSION","label":"36c7be3b-2937-45df-85ea-ca7133ea542c","domainType":"primary"},{"url":"https://github.com/FasterXML/jackson-core/commit/2cd206de1163e3fcff7bdaca425274f00668b075","label":"36c7be3b-2937-45df-85ea-ca7133ea542c","domainType":"primary"},{"url":"https://github.com/FasterXML/jackson-core/pull/1643","label":"36c7be3b-2937-45df-85ea-ca7133ea542c","domainType":"primary"},{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-649p-m576-vr99","label":"36c7be3b-2937-45df-85ea-ca7133ea542c","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96626","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96626 — Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0…","description":"Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/container_registry_service.go allow the registry URL to change while preserving the stored encrypted token. When a holder of registries:update…","indicators":{"cves":["CVE-2026-96626"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:18:58.070Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/getarcaneapp/arcane/commit/fe31693634f48f295a7d77d091085b331cf9e915","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/pull/3317","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/releases/tag/backend/v2.5.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/security/advisories/GHSA-9pxc-cxp5-qp54","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96627","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96627 — Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0…","description":"Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in backend/api/handlers/users.go sets PasswordHash for any target without comparing caller and target privilege. A holder of delegated users:update permission can submit a password change…","indicators":{"cves":["CVE-2026-96627"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:18:58.227Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/getarcaneapp/arcane/commit/21ea962f86d967dac8ae02a050f6e5f043d10fa1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/pull/3426","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/releases/tag/backend/v2.6.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/security/advisories/GHSA-pw5q-rjx4-7f7p","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/security/advisories/GHSA-pw5q-rjx4-7f7p","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111853","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111853 — An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vul…","description":"An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of user-supplied input allows remote attackers to execute arbitrary operating system commands with ele…","indicators":{"cves":["CVE-2026-111853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T02:17:18.610Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://download.tek.com/document/TEK-PSA-002-092026.pdf","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.tek.com/en/products/oscilloscopes/3-series-mdo","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111854","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111854 — An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerabil…","description":"An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access command…","indicators":{"cves":["CVE-2026-111854","CVE-2026-111855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T02:17:18.750Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://download.tek.com/document/TEK-PSA-002-092026.pdf","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.tek.com/en/products/oscilloscopes/3-series-mdo","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109208","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109208 — The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vul…","description":"The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output es…","indicators":{"cves":["CVE-2026-109208","CVE-2026-107744"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T03:16:28.340Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/assets/src/js/admin/order/refund-order.js#L104","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/admin/views/meta-boxes/order/content-tab-preview-exports-invoice.php#L86","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/admin/views/meta-boxes/order/details.php#L218","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/cart/class-lp-cart.php#L108","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/class-lp-checkout.php#L390","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/order/class-lp-order.php#L688","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.10/inc/rest-api/v1/frontend/class-lp-rest-courses-controller.php#L671","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3750024%40learnpress&new=3750024%40learnpress","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ac1ddf0-9164-45a8-b1dc-e684b1b4b447?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php#L105","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/admin/class-lp-admin-ajax.php#L80","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/learnpress/tags/4.4.9.1/inc/class-lp-request-handler.php#L173","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3750011/learnpress/trunk/inc/admin/class-lp-admin-ajax.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d1894596-b430-41b3-9d28-12c7dea7ff9b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103899","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103899 — The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripti…","description":"The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, and including, 2.1.30.260413 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t…","indicators":{"cves":["CVE-2026-103899"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:47.413Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/lib/classes/integration/admin/orders_integration.php#L238","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/lib/classes/integration/vat_number_validation/validators/vat_number_validator.php#L132","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/lib/classes/order/order.php#L56","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/plugin-main.php#L1655","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/plugin-main.php#L901","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-assistant/tags/2.1.30.260413/src/views/admin/order-vat-info-box.php#L173","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e2cd7c07-e119-4064-a7a9-08c81409f90a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108123","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-108123 — The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass…","description":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to r…","indicators":{"cves":["CVE-2026-108123","CVE-2026-109369"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:48.427Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/booking/functions.php#L244","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/booking/functions.php#L250","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/functions.php#L30","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/trunk/includes/base/admin/booking/functions.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3750085/wp-booking-system/trunk/includes/base/admin/booking/functions.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a86fab4a-71ec-4006-96f0-46202de2f389?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/form/functions-actions-form.php#L97","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/modules/user-restrictions/functions-restrictions-form.php#L56","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3750120/wp-booking-system/trunk/includes/modules/user-restrictions/functions-restrictions-form.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?old=3730163&old_path=%2Fwp-booking-system%2Ftrunk&new=&new_path=%2Fwp-booking-system%2Ftrunk","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6d795763-1c26-4ad8-b4b5-d9c051f064fb?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92798","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92798 — The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Executi…","description":"The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due to insufficient input sanitization in the 'referrer_url' branch of UR_Smart_Tags::process(), where the attacker-controlled HTTP_REFERER header is…","indicators":{"cves":["CVE-2026-92798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:17:10.257Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/class-ur-smart-tags.php#L474","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/class-ur-smart-tags.php#L475","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/modules/content-restriction/class-urcr-frontend.php#L1383","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/modules/content-restriction/functions-urcr-core.php#L693","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3741339/user-registration/trunk/includes/class-ur-smart-tags.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ec317df9-c7ef-49a3-9818-903dfe4bdd03?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92978","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-92978 — The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, Us…","description":"The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.8 This is due to missing or incorrect no…","indicators":{"cves":["CVE-2026-92978","CVE-2026-96660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:17:10.410Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L140","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L36","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L667","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/admin/class-ur-admin-user-list-manager.php#L687","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3741339/user-registration/trunk/includes/admin/class-ur-admin-user-list-manager.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/713c4652-9ca0-41f7-9a93-8186d9b359e8?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/class-ur-ajax.php#L221","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/frontend/class-ur-frontend-form-handler.php#L519","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/functions-ur-core.php#L5606","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.2.8/includes/functions-ur-template.php#L555","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3741339/user-registration/trunk/includes/frontend/class-ur-frontend-form-handler.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/690d23ee-cf70-4ecf-8cd2-21f673788d5f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100316","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-100316 — The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored C…","description":"The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all versions up to, and including, 1.36.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke…","indicators":{"cves":["CVE-2026-100316"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T08:16:26.950Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-compliance/tags/1.36.10/bootstrap.php#L1779","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-compliance/tags/1.36.10/record-order-details.php#L222","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-eu-vat-compliance/tags/1.36.10/record-order-details.php#L740","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3713548/woocommerce-eu-vat-compliance/trunk/record-order-details.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame&new=3713548%40woocommerce-eu-vat-compliance&old=3676299%40woocommerce-eu-vat-compliance","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9f17d266-e64f-4721-9c8d-5bc72791ef01?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111110","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111110 — The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerabl…","description":"The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd' parameter in all versions up to, and including, 2.8.61 due to insufficient input sanitization and output escaping. This makes it possible for un…","indicators":{"cves":["CVE-2026-111110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T08:16:28.310Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/AyeCode/invoicing/archive/refs/heads/master.zip","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/invoicing/tags/2.8.61/includes/admin/meta-boxes/class-mb-payment-form.php#L30","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/invoicing/tags/2.8.61/includes/class-wpinv-ajax.php#L359","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/invoicing/tags/2.8.61/includes/payments/class-getpaid-checkout.php#L293","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/invoicing/tags/2.8.61/includes/payments/class-getpaid-checkout.php#L402","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/invoicing/tags/2.8.61/includes/payments/class-getpaid-payment-form-submission.php#L150","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3750463/invoicing/trunk/includes/admin/meta-boxes/class-mb-payment-form.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2161ecdc-d3c2-4ede-9c42-28f30fa0f91e?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110889","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110889 — Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framew…","description":"Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4.","indicators":{"cves":["CVE-2026-110889"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T11:16:32.017Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/gantry5/vulnerability/wordpress-gantry-5-framework-plugin-5-6-4-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111880","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111880 — FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-call…","description":"FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE_MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyond…","indicators":{"cves":["CVE-2026-111880"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:28.960Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cmgx-558f-vh67","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-heap-out-of-bounds-write-via-ntlm-mic-offset","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111881","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111881 — FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mis…","description":"FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboard_synthesize_image_format_to_bmp f…","indicators":{"cves":["CVE-2026-111881"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:29.103Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-27m7-gwhh-6hhf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.14.1-before-3.32.0-integer-underflow-in-bmp-writer-via-clipboard","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-27m7-gwhh-6hhf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111882","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111882 — phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypas…","description":"phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to skip TOTP two-factor authentication through the Keycloak and Entra ID SSO callbacks. Attackers holding a valid or phished IdP identity linked to…","indicators":{"cves":["CVE-2026-111882"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:29.240Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-43g3-pp5p-fg96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-8fvf-747v-qjr6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-3.2.0-alpha-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-totp-2fa-bypass-via-sso-callbacks","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111884","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111884 — phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when c…","description":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail in the user control panel (UserController::updateData, api/user/data/update), checking only the session and CSRF token. An attacker with a hijacked session can set the e-mail…","indicators":{"cves":["CVE-2026-111884"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:29.450Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7554-gx6g-xx77","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-missing-current-password-step-up-on-e-mail-change-enables-account-takeover","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7554-gx6g-xx77","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111897","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111897 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows ca…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs outside their categories by supplying arbitrary record IDs. Attackers in medium permission mode can send upload or delete requests with a target…","indicators":{"cves":["CVE-2026-111897"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:31.487Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-hj8v-cg6r-gg6q","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-authorization-bypass-in-attachment-administration-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-hj8v-cg6r-gg6q","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111898","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111898 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows K…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching preferred_username or email. Attackers controlling a Keycloak identity with a colliding username or unverified email can log in through /auth/keyc…","indicators":{"cves":["CVE-2026-111898"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:31.647Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-rg4w-2j3r-2hhp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-account-takeover-via-keycloak-implicit-account-linking","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-rg4w-2j3r-2hhp","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111901","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111901 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability i…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurrent GET requests that load and process all database records into PHP memory, exhausting CPU and memory to crash the serve…","indicators":{"cves":["CVE-2026-111901"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:31.953Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-m42f-6p37-2c79","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-unauthenticated-dos-via-api-pagination","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-m42f-6p37-2c79","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111907","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111907 — phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/a…","description":"phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrations without validating a CSRF token. Attackers can lure a logged-in user with the CONFIGURATION_EDIT permission into submitting a crafted cr…","indicators":{"cves":["CVE-2026-111907"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:32.883Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6x9g-rfx8-g42q","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.0.0-before-4.1.9-csrf-via-admin-api-update-database","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111908","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111908 — phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authori…","description":"phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT /api/v3.1/faq/update endpoint, which checks only the global edit_faq permission and does not verify access to the target FAQ. Authenticated users with edit_faq permissi…","indicators":{"cves":["CVE-2026-111908"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:33.043Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-j3px-r7cr-r26r","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.0.0-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-bola-in-faq-update-via-rest-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-j3px-r7cr-r26r","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111909","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111909 — phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that al…","description":"phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission to delete superadmin accounts. Attackers can send a DELETE request to /admin/api/user/delete with a superadmin's userId other than 1…","indicators":{"cves":["CVE-2026-111909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:33.190Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7j43-ww55-pm3g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.9-missing-authorization-allows-superadmin-deletion-via-deleteuser-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111923","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111923 — Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property l…","description":"Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential allocati…","indicators":{"cves":["CVE-2026-111923"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:35.117Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-x467-vgxf-2g6h","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/fleet-before-4.89.0-unauthenticated-dos-via-apple-mdm-enrollment-plist-parsing","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111924","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111924 — Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers…","description":"Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Attackers can send small, highly compressed requests with Content-Encoding: gzip to unauthenticated endpoints that expand during de…","indicators":{"cves":["CVE-2026-111924"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:35.257Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/fleetdm/fleet/security/advisories/GHSA-3982-g48v-9rwh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/fleet-before-4.83.0-denial-of-service-via-unbounded-gzip-decompression","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111927","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111927 — Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains…","description":"Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyByHostname whose SIMILAR TO pattern performs a prefix match, so any domain that is a string prefix of a workspace-proxy access URL is trusted…","indicators":{"cves":["CVE-2026-111927"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:35.527Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-h58h-qvv5-xvwg","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-before-2.35.4-credential-theft-via-workspace-proxy-hostname-prefix-match","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111866","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111866 — A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4.…","description":"A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. This manipulation causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliv…","indicators":{"cves":["CVE-2026-111866"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T00:16:37.960Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://gist.github.com/asdfghjkl12345678910111/c0765c971814f0eadc901d3719ee3f45","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111866","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005032","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421574","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421574/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110031","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110031 — The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom…","description":"The Salon Booking System  WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site.","indicators":{"cves":["CVE-2026-110031"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.077Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/8d24ad5b-2d50-467b-9c40-45e86e53dafb/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110981","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110981 — The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navig…","description":"The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyone w…","indicators":{"cves":["CVE-2026-110981"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.817Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/8328dd66-924c-4e74-972e-68ce65408159/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96534","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-96534 — The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress…","description":"The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges (Subscriber and above) to perform SQL injection a…","indicators":{"cves":["CVE-2026-96534"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:53.680Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/8c2f8229-1222-49e7-a17f-ef0852f4c805/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107436","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107436 — Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials…","description":"Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12.","indicators":{"cves":["CVE-2026-107436"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:34.720Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/strong-testimonials/vulnerability/wordpress-strong-testimonials-plugin-3-3-12-php-object-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110373","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110373 — Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phon…","description":"Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77.","indicators":{"cves":["CVE-2026-110373"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:36.703Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/login-with-phone-number/vulnerability/wordpress-login-with-phone-number-plugin-1-8-77-privilege-escalation-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110383","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-110383 — Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signatur…","description":"Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electronic Signature Add-on for Fluent Forms…","indicators":{"cves":["CVE-2026-110383"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:36.943Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/signature-fluent-contract-forms-add-on/vulnerability/wordpress-electronic-signature-add-on-for-fluent-forms-plugin-2-0-5-insecure-direct-object-references-idor-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111999","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111999 — Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticate…","description":"Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/{ns}/eventbus/{name}/events or legacy /gate…","indicators":{"cves":["CVE-2026-111999"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:11.870Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/gateway/gateway.go#L81-L124","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vanus-labs/vanus/issues/647","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vanus-0.8.0-through-0.9.0-missing-authentication-via-gateway-cloudevents-http-receiver","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112000","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112000 — Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows…","description":"Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without permission checks. Attackers can supply another tenant's subscription ID to Subscribe to hijack it, read and acknowledge…","indicators":{"cves":["CVE-2026-112000"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:12.007Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/gateway/auth/auth.go#L97-L110","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/gateway/auth/interceptor.go#L35-L40","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vanus-labs/vanus/blob/v0.9.0/internal/gateway/proxy/proxy.go#L256-L300","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vanus-labs/vanus/issues/647","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vanus-0.8.0-through-0.9.0-missing-authorization-in-gateway-streaming-rpcs","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112001","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112001 — ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restric…","description":"ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's credentials via PATCH /api/v1/users/{user}. Attackers with a token limited to manage_users and edit_users can set a new owner password, clear two-fact…","indicators":{"cves":["CVE-2026-112001"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:12.140Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/projectsend/projectsend/blob/v2.6.0/app/Modules/Identity/StaffAccounts.php#L153-L162","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/commit/db65731c3ad28ac7f0d541c60cb65eb100958514","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/releases/tag/v2.7.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/security/advisories/GHSA-j5cp-r8pr-m5cr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/projectsend-2.0.0-before-2.7.0-incorrect-authorization-via-users-api-token-abilities","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/projectsend/projectsend/security/advisories/GHSA-j5cp-r8pr-m5cr","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112005","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112005 — WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to…","description":"WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without credentials and use read_text, read_blob, COPY ... T…","indicators":{"cves":["CVE-2026-112005"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:12.790Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/clidey/whodb/blob/0.134.0/core/src/plugins/duckdb/db.go#L73-L95","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/clidey/whodb/blob/0.134.0/core/src/plugins/duckdb/duckdb.go#L375-L387","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/clidey/whodb/commit/80111c9ebc2eec382222629ba9fd26236f1a40e6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/clidey/whodb/releases/tag/0.135.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/clidey/whodb/security/advisories/GHSA-x3h5-pr45-fx4r","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/whodb-0.104.0-before-0.135.0-arbitrary-file-read-write-via-duckdb-query-editor","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112015","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112015 — Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users…","description":"Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers can upload a bundle whose sub-agent uses an absolute or parent-traversing working directory, bypassing root-only validati…","indicators":{"cves":["CVE-2026-112015"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:14.303Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/omnigent-ai/omnigent/blob/v0.13.0/omnigent/server/bundles.py#L138-L155","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/omnigent-ai/omnigent/commit/4a406d5b3b3f3a7c3401eab659ab04e728923b94","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/omnigent-ai/omnigent/releases/tag/v0.14.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-p5x3-3gqh-x44g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/omnigent-0.3.0-before-0.14.0-path-traversal-via-sub-agent-os-env-cwd","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112018","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112018 — cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats…","description":"cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats() that allows attackers to write outside the output buffer via unchecked sparse accessor indices. Attackers can supply a crafted glTF or GLB file with large sparse indices to corrupt heap memory, cra…","indicators":{"cves":["CVE-2026-112018"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:14.747Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/jkuhlmann/cgltf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jkuhlmann/cgltf/blob/360db1a95480fe102ae9c69b27c5d101167ff5ba/cgltf.h#L2436-L2441","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/cgltf-accessor-unpack-floats-sparse-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cgltf-through-1.15-heap-out-of-bounds-write-via-cgltf-accessor-unpack-floats","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/cve-2026-112018-112019-cgltf-accessor-unpack-floats-sparse-oob","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112021","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112021 — snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that…","description":"snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \\u0000 escape. Attackers can send a single crafted application/activity+json POST to activitypub_pos…","indicators":{"cves":["CVE-2026-112021"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:15.200Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://codeberg.org/grunfink/snac2","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://codeberg.org/grunfink/snac2/commit/ec2c5c2046e0381bc942ec5d0d05ec861fe377e7","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://codeberg.org/grunfink/snac2/releases/tag/2.93","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://codeberg.org/grunfink/snac2/src/tag/2.92/xs_json.h#L283-L285","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gist.github.com/nullenvk/2bf288e2d34cb3d4b7143e61dbf7d90b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://nullenvk.pl/posts/02-snac2-json","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/snac2-before-2.93-heap-based-buffer-overflow-via-json-parser-xs-json-load-lexer","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111990","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111990 — A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba…","description":"A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query of the file admin-panel.php of the component Appointment Cancellation Handler. Executing a manipulation of the argument ID can lead to sql in…","indicators":{"cves":["CVE-2026-111990"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:52.693Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/kishan0725/Hospital-Management-System/issues/75","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111990","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1007402","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421655","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421655/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98455","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98455 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: fix NULL dere…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO\n\nThe RFCOMM_CONNINFO getsockopt handler accepts a socket that is not\nconnected as long as deferred setup is enabled:\n\n\tif (sk->sk_state != BT_CONNECTED &&…","indicators":{"cves":["CVE-2026-98455"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.863Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/005b23d9e324fe5d0acbcfa70c625f2e81189046","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1c4f7e1177da2f229be04139c27e5370a1cfba52","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/46f8ffd0a1f1eb6cbc94946a92c11ef601e228a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4bf5ca47203049ce3648f750a53dcdc98bcc9e3e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/84ae3cfd7d3a63591a2eb4faa24faf678c6708aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8f5b30cc12c409ff62891e47ed51e6bf0945a3ea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3aee3fc1287c8a555baf3895959087cb0c33fe8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c7362f6a18ed167f52f08ce25eeec8a7818c5004","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98467","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98467 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix null ptr der…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race\n\nCommit 7270cc9157f4 (\"KVM: arm64: nv: Handle VNCR_EL2 invalidation from MMU\nnotifiers\") introduced VNCR_EL2 invalidation in both kvm_nested_s2_unmap()\nand kvm_ne…","indicators":{"cves":["CVE-2026-98467"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.190Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/3cefc1ab511fad6a0f708e7a4aee9f91346e9457","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4c74e233cdedd11592775fae2a6243e67ca3f891","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/970de111c087488e53cadf5480b94e0f695db985","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98483","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98483 — In the Linux kernel, the following vulnerability has been resolved: nfc: fix use-after-free in nfc_g…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: fix use-after-free in nfc_get_local_general_bytes\n\nCommit 6709d4b7bc2e (\"net: nfc: Fix use-after-free caused by\nnfc_llcp_find_local\") attempted to fix a use-after-free (UAF) issue by\ninvoking nfc_llcp_local_put(local) after ac…","indicators":{"cves":["CVE-2026-98483"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.940Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/19bcfc2a56d0b82919079b5424c5a9a0ac897dcf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/25bfa673adc70189c0bc872940421ae59f789cf6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2b31d0cc95856c856ada91f943fb14dfdf29a923","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/841af260ff477f6191872bc3b2e15488615c1827","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9ede11e12f965ace97c4e0f606667f24fb41e7e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c40f61a6a413f3eaf028e5fe367fd9749e503ab0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d8c929e9afdbc33b1876ecb97a517e850449b5bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dcab71a7011918f6fdba7adcec02d217dcb84b8d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98508","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98508 — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer der…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix NULL pointer dereference on fence allocation failure\n\nvirtio_gpu_fence_alloc() can fail due to memory pressure and return NULL,\nbut its caller like virtio_gpu_init_submit() never checks it. Later,\nvirtio_gpu_init_su…","indicators":{"cves":["CVE-2026-98508"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.947Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/846b3c64fe3e77d9db20a7e3e62dbbb637c773e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9571ab7493561afb4624d69572a7ebb67d76d10f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a8b83ed4a4b1d04c756f53e375e86d3881f66e72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ecced0076b700b5896e52af10d0776be8be36b0d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f2f1683955b95c9b958069da3050f7e8e129ff88","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98510","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98510 — In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: nuke PTs only after u…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/vm: nuke PTs only after unlinking contested VMAs\n\nIn xe_vm_close_and_put(), external-BO VMAs are queued on the contested\nlist for deferred destruction via xe_vma_destroy_unlocked(). However,\nxe_vm_pt_destroy() was previously…","indicators":{"cves":["CVE-2026-98510"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.203Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/24a22fb3c731474b68e986af6804db450fb88617","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/70fddc065ac80845ffd33095b3635d59883cf7e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ba678c2b02e0d36b53deb5a6d5e5ea044d36def7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bddaa5e4094c134452c29e20a26c4718827e4cb1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98511","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98511 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't bump pin coun…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()\n\nnouveau_bo_pin_locked() checks whether an already pinned BO is in a\nmemory domain compatible with a new pin request. When the domains are\nincompatible,…","indicators":{"cves":["CVE-2026-98511"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.310Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/189ffc7b6cad6390c0695031cb6c7c63472981e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/19f5a5839b308697824ff46e6213a2b4cb677771","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5cb7109f0f5f1b47b172e2d5b868d4ce3ae687f8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6a6870d3077faa501ca97760057ddca22b68418d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/73c7093e6cc1e6b181a79e16eccc4b8d4f34d8ee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9924c1d64405be8d10b906368dfb1cfe0d0c6bf0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a6e755acf85793a7b4d29ba27b5421af1087263f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98515","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98515 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: fix double-free in nvif_vmm_dtor\n\nOn failure, nouveau_cli_init() calls nouveau_cli_fini() to tear\nthe client down. Then, nouveau_drm_open() also enters into its\ncleanup path and calls nouveau_cli_fini() AGAIN. nouveau_…","indicators":{"cves":["CVE-2026-98515"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.773Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/023e7a01f8fb27799f0987b5bcda325d73a2904c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/109a8d2d5b7d2719ebe09df3f9241023900b3846","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/279e5ac137370e274a09dd552547ae6bddd0d4d5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/375901ac0f286e81be00a4126e57d488cb401884","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/872a5473c02a26c955be44d52b7ab2f8ea70a2cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/97077ac87afe9e91ec074ef0be64454e7ccbf344","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bf542ecd4f60d4689818d194e7ca74772fe0f8b5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f09f4a536935b15539f2de9fe775a2641202be90","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98519","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98519 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()\n\namdgpu_debugfs_test_ib_show() resumes the device with\npm_runtime_get_sync() before taking the reset domain semaphore with\ndown_write_killable().  If the write lock a…","indicators":{"cves":["CVE-2026-98519"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.260Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/2556dd3a36beb3a11041ef01b5e9762e2157909f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2b86ab1bd6673c525adda88819d7658ba9e784ec","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2c1a643942caae938ea84df2648a9b0c136e09be","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c28e74395ab09922bbf5be42bc5a6ed1ba4f3c37","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e016347fb1829489e062ea51a98a51f48b1d582d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fc5606ac91642d0f184b83ab833148c457c3c331","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98588","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98588 — In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject max_entries…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc\n\nsock_map_alloc() only rejects max_entries == 0 and otherwise allows any\nu32 value.  sock_map_free() then walks the sks[] array with a signed int\niterator:\n\n\tint i;\n\tfor…","indicators":{"cves":["CVE-2026-98588"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.393Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/814a81c842bd88f6bd8a4ce550d560df071a5d03","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/909f761868fda329dc69130ef9eb5b5795bcdf00","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ba7d627dbc67d62df2fa66d7b41e743c3ace0ec8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c56191af3a578b9cc265fa3bd5fc0752c59c1781","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc70972ddbf0e3398f2f32624d31db78594d50d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cea597519b9ca6d691c98d92460ead8ece2a07af","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f4a73f49e256bd835368504462be3b57b03febff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98596","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98596 — In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix dst leak for uncached routes.\n\nip6_route_output_flags(), ip6_rt_put_flags(), and ip6_dst_check()\ndetect an uncached route by list_empty(&rt->dst.rt_uncached),\nwhich replaced the static DST_NOCACHE flag check in commit\na4c…","indicators":{"cves":["CVE-2026-98596"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.283Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/5045aa25f3790dcdb158a58ac60ccf8da42959aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/be31fe6333f534155e6b408f1ef6d77974bb41aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ed902d5546fb9c142b3216d8eec914fa1bc0aa80","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f9722746df13a8a29103c847ef56b02c11ce0963","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98624","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98624 — In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: hold…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_queue: hold nfnl mutex in event notifier\n\nWe must serialize the release notifier and the config netlink function.\nA concurrent thread can issue close() which can call the release function\nwhile unrelated socket…","indicators":{"cves":["CVE-2026-98624"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.393Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/07a3ec8fdc5a1267c00cd6fd1cf8bbb5cda913c1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1d1184411599a7c2217560bab3bbe641c6d03b95","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2e9be1302f25c9be51c2fb8c907bc6d8a1050e33","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/46432f2e76f7c385d82506304a2928e7d293289f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/597320337c3da06c92a9e95cfc755da66fedc476","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8137a39e08e838ced234044384740ceeb99ed388","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9461613afc59acef44a0071b0dd5075f6e993ffe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d559e06a5ab7c064100aafd5c826eadd0f1c6216","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98717","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98717 — In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Bail from shadow w…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy\n\nWhen walking shadow page tables, immediately terminate the walk if the root\nis a \"dummy\" root, i.e. a root whose top-level page table is backed by the\nzero pag…","indicators":{"cves":["CVE-2026-98717"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.250Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/681e31f03ec9219099a66a0f6e1bc48e1b5aa914","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/97c1dcce17ef27853860c781f9912257e6adbf7c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b6249c1d5665098c8bf12f8d3e4712bf04c775bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e1bcabc07efd029ab414894127411129ffdb8b48","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98761","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98761 — In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: recover after…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: recover after failure to start the frs ams\n\nReset the port if the tcpm fails to start the FAST_ROLE_SWAP AMS by\ninitiating error recovery on it.\n\nThis helps in cases where some cables (incorrectly) signal an FRS t…","indicators":{"cves":["CVE-2026-98761"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.900Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/184d842121e7d1fbc3a81895f36f72fa27444163","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/90156585765b29304f07b0e4a1c56a969876fcfc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b2ed8643face247e513fad12e193378ba67a61a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d6b0cce612636f79f2cf0652fce40a0cbff7f0ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98762","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98762 — In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup time…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: dwc2: shut down wakeup timer before freeing HCD state\n\ndwc2_wakeup_detected() accesses the DWC2 host state and can rearm the\nwakeup timer.  dwc2_hcd_free() currently deletes the timer only after\nfreeing host-owned state, and t…","indicators":{"cves":["CVE-2026-98762"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.013Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/4333174ea52c863a50bb3e0a4726bf9f7cdf7524","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/441be312fce927443eae2821f502344d953c38bb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/79ba37dd38a321cb32a79332a3e3c68dd334dca9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd772af9512cdecb83de34a461801533828e77fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98775","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98775 — In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: fix use-after-fr…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnitro_enclaves: fix use-after-free on SLOT_ALLOC failure\n\nWhen ne_create_vm_ioctl() fails the SLOT_ALLOC request after\nanon_inode_getfile() has succeeded, the error path calls\nfput(enclave_file) and then frees ne_enclave.\n\nIn norma…","indicators":{"cves":["CVE-2026-98775"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.437Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/43f78b328f3907ca2f7424e15b7e45ffbf9fe21c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/466041d14f26dc2babd606a2e85dce08774112a6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9bc184a2eda8b773c88ecbff934001ad649b9cc1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f7fb6c2835ede1b8ad84cf7e78a528a9d0159b84","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98776","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98776 — In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binde…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbinderfs: fix UAF write in binder_add_device\n\nbinderfs_binder_device_create() publishes the new dentry with\nd_make_persistent() and then calls simple_done_creating(), which drops\nthe parent directory lock and the creator's dentry r…","indicators":{"cves":["CVE-2026-98776"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.540Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/30d15f44a9e513ec2f257fdf192d9d1fa5af0799","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/885bbbe52d31856768de439e9720f1ffa474a93a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98780","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98780 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix IP instance memo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix IP instance memory leak on kobject add failure\n\namdgpu_discovery_sysfs_ips() allocates ip_hw_instance with\nkzalloc_flex() and initializes its embedded kobject before calling\nkobject_add().\n\nIf kobject_add() fails, t…","indicators":{"cves":["CVE-2026-98780"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.960Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/0563b26c1437fe7e25ea42c334eb85c0a703f8ff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7ca44cb14d0249992a8f1425ba004d6e2d16d255","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c05bbcc263d67b8b158e2a52be7e3005895969d1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f5a5add3605935163dd0f75749b6a7869e9765af","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98800","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98800 — In the Linux kernel, the following vulnerability has been resolved: bpf: Wait for an RCU tasks grace…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Wait for an RCU tasks grace period before freeing trampoline progs\n\nWhen a prog is detached from a trampoline, it is freed after an RCU\ngrace period, or an RCU tasks trace one if it is sleepable. This covers\nthe tasks that are…","indicators":{"cves":["CVE-2026-98800"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.030Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0fb5751a6e411b1b466c06e50021818d9391df98","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/40955f6512a03f0e046f5256b0706b26ba191018","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98815","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98815 — In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: fix cdev lifetime\n\nSashiko bot reported a potential problem for the cdev lifetime in [0]\n- the code there is heavily based on the NVMe code.\n\nCurrently the NS head .open and .release file_operations methods take and\nput a ref…","indicators":{"cves":["CVE-2026-98815"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.640Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/98b09ad7934482e64db4b4477d91e3bbf43adf4c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9952f3882ecba709092379b71e02b09762b26f96","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98838","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-98838 — In the Linux kernel, the following vulnerability has been resolved: vt: skip screen update for DEC a…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvt: skip screen update for DEC alignment test on backgroup consoles\n\n[BUG]\nRecently, we encountered a KASAN warning as follows:\n\nBUG: KASAN: slab-out-of-bounds in fb_pad_aligned_buffer+0x11f/0x140\nRead of size 1 at addr ff1100015fd…","indicators":{"cves":["CVE-2026-98838"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.060Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0928ed9bd7946baee911efa401088697836e3b1e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0ee53081425a1a31ce15089012cd96b8353eb44e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/985c000b046ca4ee11ee34ef85db500c569ef6e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ad06f7312d3f615dd466483ce81a9b9619166686","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109553","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109553 — Gitea resolved the principals of an SSH certificate by searching the content of all stored public ke…","description":"Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea trusts a user certificate authority (`SSH_TRUSTED_USER_CA_KEYS`) and accepts arbitrary principals (`SSH_AUTHORIZED_PRINCIPALS_ALLOW=anything`), a user cou…","indicators":{"cves":["CVE-2026-109553"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:32.997Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39839","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39847","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-vcp6-2qc6-gvq3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112025","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112025 — A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601…","description":"A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown function of the file App/Home/Controller/UserController.class.php of the component Captcha Validation. Executing a manipulation can lead to impro…","indicators":{"cves":["CVE-2026-112025"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T22:16:30.410Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/light0011/cms/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/light0011/cms/issues/13","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112025","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008050","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421673","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421673/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111441","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111441 — 在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提…","description":"在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpy_s() 拷贝输入，既未校验 lenTotal >= lenUsed，也将 memcpy_s() 目标大小写成 lenUsed 而非实际分配的 lenTotal，导致安全拷贝无…","indicators":{"cves":["CVE-2026-111441"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T03:16:58.543Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://gitcode.com/opengauss/openGauss-server/pull/9380","label":"a1a479f7-907b-4ae8-a999-9148cadc9224","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112044","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112044 — A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f371…","description":"A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper authentication.…","indicators":{"cves":["CVE-2026-112044"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T03:16:59.153Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/dotnet/eShop/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/dotnet/eShop/issues/997","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112044","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009026","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421692","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421692/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111440","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111440 — 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据…","description":"在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String 为参数的构造函数，再转换为 Log。缺少 asSubclass(Log.class) 校验，非 Log 实现类也会在类型检查前被实例化。因此，当攻击者可控制 JDBC URL 或连接属性中的 logger 类名，且客户端 classpath 中存在可被加载的类时，可能在客户端触发非…","indicators":{"cves":["CVE-2026-111440"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T04:17:03.657Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://gitcode.com/opengauss/openGauss-connector-jdbc/pull/423","label":"a1a479f7-907b-4ae8-a999-9148cadc9224","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112082","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112082 — A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Schedul…","description":"A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulation leads to denial of service. It is pos…","indicators":{"cves":["CVE-2026-112082"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:23.013Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/sgl-project/sglang/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/42071","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/pull/42098","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112082","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009918","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421761","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421761/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16487","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-16487 — A flaw was found in bootc when operating with the default containers signature policy. Automatic or…","description":"A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS conte…","indicators":{"cves":["CVE-2026-16487"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:24.203Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-16487","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503686","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16460","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-16460 — A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating…","description":"A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsi…","indicators":{"cves":["CVE-2026-16460"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:31.253Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-16460","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503167","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76740","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76740 — A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and…","description":"A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.","indicators":{"cves":["CVE-2026-76740"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:31.900Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05153en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112093","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112093 — A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a144…","description":"A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function of the file feedback.php. The manipulation of the argument msg leads to cross site scripting. The attack can be initiated remotel…","indicators":{"cves":["CVE-2026-112093","CVE-2026-112139"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T08:17:03.440Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/subhajitkhan/online-clinic-management-system/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/subhajitkhan/online-clinic-management-system/issues/7","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112093","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011791","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421902","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421902/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/subhajitkhan/online-clinic-management-system/issues/5","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112139","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013202","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422244","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422244/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104679","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-104679 — VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references.…","description":"VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensitive information from the device where the product is installed…","indicators":{"cves":["CVE-2026-104679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:06.890Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://jvn.jp/en/vu/JVNVU93520490/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://www.vocaloid.com/en/news/support_64/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://www.vocaloid.com/news/support_64/","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111398","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111398 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT N…","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1.","indicators":{"cves":["CVE-2026-111398"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:45.880Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-16-1-arbitrary-file-deletion-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111408","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111408 — Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-ne…","description":"Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7.","indicators":{"cves":["CVE-2026-111408"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:46.257Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/quiz-master-next/vulnerability/wordpress-quiz-and-survey-master-plugin-11-2-7-php-object-injection-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112104","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112104 — A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknow…","description":"A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Executing a manipulation of the argument remoteEnabled can lead to missing authentication. The attack may be launched remotel…","indicators":{"cves":["CVE-2026-112104"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:16.967Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/eremef/bandcamp-player/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/eremef/bandcamp-player/commit/ccba99b66bc61acf46e4a332034799d7452ddea6","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/eremef/bandcamp-player/issues/104","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/eremef/bandcamp-player/pull/119","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/eremef/bandcamp-player/releases/tag/v1.8.34-beta","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112104","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013134","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422045","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422045/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78164","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-78164 — Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Info…","description":"Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, Undertow and Vert.x HTTP components.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4…","indicators":{"cves":["CVE-2026-78164"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:19.403Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-78164.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/commit/7cec534c66969015d85e56631143174dd150ed94","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/commit/9f8a185e315ce9e120889c4106be3dbf4688e507","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/commit/ba5aced7f6a1c38a963020575676ad4c76b492cf","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25571","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24418","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78165","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-78165 — Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue a…","description":"Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.\n\n\n\nThis issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\nRedisConfiguration.getSerializer lazily built a bare JdkSerializationRedisSerializer whenever no serializer option was…","indicators":{"cves":["CVE-2026-78165"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:19.643Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-78165.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25587","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25588","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25589","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25734","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24421","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79983","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-79983 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac…","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\nThe Camel remote-file consumers poll a directory on a remote server and build the ab…","indicators":{"cves":["CVE-2026-79983","CVE-2026-79984","CVE-2026-79985","CVE-2026-79986"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:20.207Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-79983.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25730","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25745","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25746","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25747","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24487","label":"security@apache.org","domainType":"other"},{"url":"https://camel.apache.org/security/CVE-2026-79984.html","label":"security@apache.org","domainType":"other"},{"url":"https://camel.apache.org/security/CVE-2026-79985.html","label":"security@apache.org","domainType":"other"},{"url":"https://camel.apache.org/security/CVE-2026-79986.html","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-80312","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-80312 — Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Cam…","description":"Improper Authentication vulnerability in Apache Camel OAuth component.\n\n\n\nThis issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\nThe camel-oauth processors that guard a route did not stop the exchange when authentication could not be completed. Where a failure to e…","indicators":{"cves":["CVE-2026-80312"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:21.073Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-80312.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25567","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25575","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25576","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24411","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-80343","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-80343 — Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue…","description":"Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\nThe camel-netty-http security constraint compared the request path against the configured context path using a case-se…","indicators":{"cves":["CVE-2026-80343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:21.223Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-80343.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25578","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25761","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25762","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24412","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-80344","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-80344 — Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects A…","description":"Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nIn the AS2 protocol the sender of a message may request that the Message Disposition Notification be returned asynchronously to an a…","indicators":{"cves":["CVE-2026-80344"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:21.363Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-80344.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25637","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25763","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25764","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24417","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-83531","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-83531 — Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elemen…","description":"Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache Camel.\n\n\n\nThis issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1.…","indicators":{"cves":["CVE-2026-83531"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:21.507Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-83531.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25992","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26018","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26019","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26020","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24576","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85250","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85250 — Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.…","description":"Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nWith documentType set to InputSource, XPathBuilder handed the payload straight to javax.xml.xpath, which builds…","indicators":{"cves":["CVE-2026-85250"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:23.257Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85250.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25683","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25940","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25942","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24475","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85251","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-85251 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP compon…","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nTwo paths handed credentials to a redirect target, which is a host chosen by the remote server rather than…","indicators":{"cves":["CVE-2026-85251"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:23.417Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85251.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25830","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25937","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25938","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24452","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88901","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88901 — Improper Restriction of XML External Entity Reference vulnerability in Apache Camel. This issue affe…","description":"Improper Restriction of XML External Entity Reference vulnerability in Apache Camel.\n\n\n\nThis issue affects Apache Camel: from 4.7.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\nImproper Restriction of XML External Entity Reference in the Smooks component (camel-smooks) in Apache Camel allows an atta…","indicators":{"cves":["CVE-2026-88901"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:25.340Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-88901.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/26270","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26327","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26329","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24677","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88900","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-88900 — Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue…","description":"Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\nJGroupsEndpoint.createExchange(Message), which CamelJGroupsReceiver calls for every message the jgroups consumer receiv…","indicators":{"cves":["CVE-2026-88900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:17:11.980Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-40860.html","label":"security@apache.org","domainType":"other"},{"url":"https://camel.apache.org/security/CVE-2026-88900.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/26267","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26281","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26282","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26283","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26326","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/27205","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24676","label":"security@apache.org","domainType":"other"},{"url":"https://issues.apache.org/jira/browse/CAMEL-25223","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103314","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-103314 — A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authe…","description":"A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and r…","indicators":{"cves":["CVE-2026-103314"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:53.617Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-103314","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543879","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112141","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112141 — A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4…","description":"A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument id/name/title/year/gender/fromdate/todate/…","indicators":{"cves":["CVE-2026-112141"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:57.140Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/satya-vinay/Events-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/satya-vinay/Events-Management-System/issues/2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112141","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013207","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422246","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422246/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112142","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112142 — A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4…","description":"A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql i…","indicators":{"cves":["CVE-2026-112142"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:57.303Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/satya-vinay/Events-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/satya-vinay/Events-Management-System/issues/3","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112142","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013210","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422247","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422247/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112143","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112143 — A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e…","description":"A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploi…","indicators":{"cves":["CVE-2026-112143"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:01.800Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/satya-vinay/Events-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/satya-vinay/Events-Management-System/issues/4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112143","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013211","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422248","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422248/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112145","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112145 — A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerabil…","description":"A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager._load_fn of the file src/speaches/executors/pyannote_diarization.py of the component Pyannote Diarization Model Loading. The manipulation of th…","indicators":{"cves":["CVE-2026-112145"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:02.140Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/speaches-ai/speaches/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/speaches-ai/speaches/issues/679","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/33028601/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112145","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013214","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422250","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422250/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112146","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112146 — A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown proces…","description":"A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. The exploit is now public and may…","indicators":{"cves":["CVE-2026-112146"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:02.317Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/XueDugu/dlink-eaglepro-easymesh-mqtt-credential-evidence/tree/master/poc","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112146","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013245","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422251","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422251/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.dlink.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112262","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112262 — RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQ…","description":"RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posix_fs sources and fs sinks. Attackers holding schema CREATE privilege can set posix_fs.root or fs.path to any directory to read credenti…","indicators":{"cves":["CVE-2026-112262"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:02.633Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/risingwavelabs/risingwave/blob/v3.0.5/src/connector/src/sink/file_sink/fs.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risingwavelabs/risingwave/blob/v3.0.5/src/connector/src/source/filesystem/opendal_source/posix_fs_source.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risingwavelabs/risingwave/blob/v3.0.5/src/frontend/src/handler/create_source.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risingwavelabs/risingwave/commit/4603a7ea5cc104fa9ca0779bc459bef630e7f621","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risingwavelabs/risingwave/pull/25971","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risingwavelabs/risingwave/releases/tag/v3.1.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/risingwave-before-3.1.0-missing-authorization-via-posix-fs-and-fs-connectors","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112263","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112263 — Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows att…","description":"Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format_command. Attackers can plant a file with a crafted name containing an apostrophe so that triggering an action like the d…","indicators":{"cves":["CVE-2026-112263"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:02.787Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/alexpasmantier/television/blob/0.15.9/cable/unix/files.toml","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/alexpasmantier/television/blob/0.15.9/television/utils/command.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/alexpasmantier/television/commit/32695ccc6cd2b05cf7f1d3b80c24e324d5343eec","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/alexpasmantier/television/commit/d7d46abb791181a3b5b6eed05e72aafcaa0ef269","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/alexpasmantier/television/issues/1166","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/television-0.15.0-through-0.15.9-os-command-injection-via-external-action-formatting","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112264","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112264 — BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attacke…","description":"BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mapping keys rendered by the legacy base.j2 template. Attackers can supply a crafted bentofile.yaml or imported bento archive…","indicators":{"cves":["CVE-2026-112264"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:03.003Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/bento/build_config.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/__init__.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/frontend/dockerfile/templates/base.j2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bentoml/BentoML/blob/v1.4.39/src/bentoml/_internal/container/generate.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/geo-chen/oss/blob/main/BentoML.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/bentoml-through-1.4.39-dockerfile-instruction-injection-via-docker-env-keys","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/geo-chen/oss/blob/main/BentoML.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112287","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112287 — Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailControlle…","description":"Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate other users' emails by supplying their numeric IDs. Attackers can call update, destroy, mass-update or mass-destroy endpo…","indicators":{"cves":["CVE-2026-112287"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:07.143Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Mail/EmailController.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/pull/2683","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-broken-object-level-authorization-in-mail-module","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112149 — A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a4873…","description":"A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move_uploaded_file of the file home.php. The manipulation of the argument my_img leads to unrestricted upload. Remote exploitation of the attack is possible.…","indicators":{"cves":["CVE-2026-112149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:03.943Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112149","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014014","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422256","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422256/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112150","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112150 — A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519…","description":"A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has bee…","indicators":{"cves":["CVE-2026-112150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:05.033Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112150","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014016","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422257","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422257/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112151","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112151 — A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a4873…","description":"A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument id/name/offName/crime/dob/arrDate/c…","indicators":{"cves":["CVE-2026-112151"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:05.207Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/issues/3","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112151","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014017","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422258","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422258/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107567","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107567 — Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.…","description":"Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write signed with the DKIM key of a domain the server hosts, so that it passes DKIM and DMARC for that domain at other receivers. With DKIM…","indicators":{"cves":["CVE-2026-107567"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.587Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/84","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107569","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107569 — Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a r…","description":"Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail. The server bounds the mail it generates in response to a message - a rule forward, reply or copy, an account forward, a Sieve redirect,…","indicators":{"cves":["CVE-2026-107569"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.830Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/81","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107571","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107571 — Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 throug…","description":"Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent, suc…","indicators":{"cves":["CVE-2026-107571"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.970Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/78","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109431","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109431 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulne…","description":"Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers with no permission grants to access task comments and attachments by calling singular read and delete endpoints that lack…","indicators":{"cves":["CVE-2026-109431"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:02.337Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codeant.ai/security-research/camunda-task-attachment-authorization-cve-2026-109431","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docs.camunda.org/enterprise/download/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/camunda-missing-authorization-in-task-sub-resources","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111045","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111045 — CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink po…","description":"CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as…","indicators":{"cves":["CVE-2026-111045"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.183Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/anshupriyan/cli-bridge/commit/284a84c5ac4db8dd0e1bc9db81bd15bdc83fcb38","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anshupriyan/cli-bridge/pull/3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anshupriyan/cli-bridge/releases/tag/v0.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anshupriyan/cli-bridge/security/advisories/GHSA-8jc4-x8v7-2q9r","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112152","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112152 — A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc…","description":"A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqli_query of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sql…","indicators":{"cves":["CVE-2026-112152"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.403Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112152","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014022","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422259","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422259/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112153","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112153 — A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365…","description":"A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqli_error of the file Officers/addOfficer.php of the component Officer Registration Form. Performing a manipulation of the argument offName/offID/ID/contact…","indicators":{"cves":["CVE-2026-112153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.567Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/vraj404/Criminal-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/vraj404/Criminal-Management-System/issues/5","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112153","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014023","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422260","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422260/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112304","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112304 — docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() tha…","description":"docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading pro…","indicators":{"cves":["CVE-2026-112304"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.257Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/mindee/doctr/blob/v1.1.0/doctr/models/utils/pytorch.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mindee/doctr/commit/687503dd15592483c4699ee51280b41938579a9e","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mindee/doctr/issues/2175","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/doctr-through-1.1.0-unsafe-deserialization-rce-via-load-pretrained-params","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112305","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112305 — Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with t…","description":"Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansible_ssh_common_args with a ProxyCommand or an…","indicators":{"cves":["CVE-2026-112305"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.400Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/semaphoreui/semaphore","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/api/projects/tasks.go#L39-L75","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/services/tasks/TaskRunner.go#L395-L431","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/semaphoreui/semaphore/pull/3888","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/semaphore-ui-through-2.19.16-rce-via-task-environment-ansible-variable-override","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112306","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112306 — NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that…","description":"NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection query…","indicators":{"cves":["CVE-2026-112306"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.570Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/nocobase/nocobase","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nocobase/nocobase/blob/v2.2.28/packages/plugins/@nocobase/plugin-collection-sql/src/server/resources/sql.ts#L14-L104","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nocobase/nocobase/issues/10629","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nocobase-plugin-collection-sql-through-2.2.28-sql-injection-via-sqlcollection-setfields","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112307","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112307 — sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject P…","description":"sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed ${expr} or {${expr}} sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP…","indicators":{"cves":["CVE-2026-112307"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.727Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/andialbrecht/sqlparse/blob/0.6.0/sqlparse/filters/output.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/andialbrecht/sqlparse/pull/930","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sqlparse-through-0.6.0-php-code-injection-via-output-format-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112308","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112308 — crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapin…","description":"crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url private-address check. Attackers influencing agent tool input through prompt injection can direct head…","indicators":{"cves":["CVE-2026-112308"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.887Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/crewAIInc/crewAI/blob/1.15.28/lib/crewai-tools/src/crewai_tools/tools/selenium_scraping_tool/selenium_scraping_tool.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/crewAIInc/crewAI/pull/6870","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/crewai-tools-through-1.15.28-ssrf-via-seleniumscrapingtool","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112309","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112309 — @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauth…","description":"@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form pars…","indicators":{"cves":["CVE-2026-112309"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.050Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/airjp73/rvf/blob/61172ff01bf1250893108e5c80f35b5ac0388ecb/packages/core/src/native-form-data/flatten.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/airjp73/rvf/blob/61172ff01bf1250893108e5c80f35b5ac0388ecb/packages/set-get/src/setPath.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/airjp73/rvf/commit/4a5e118667549ac41f065b4cfa80b995841c3811","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/rvf-set-get-before-7.0.4-prototype-pollution-via-setpath-inherited-methods","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112366","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112366 — Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows at…","description":"Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like +(*) or +(*a), which analyzeRepeatedExtglob in lib/parse.js skips, causing expone…","indicators":{"cves":["CVE-2026-112366"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.500Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/micromatch/picomatch/blob/4.0.7/lib/parse.js#L287-L307","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/micromatch/picomatch/pull/194","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/picomatch-through-4.0.7-redos-via-single-branch-repeated-extglob-patterns","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112368","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112368 — An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an…","description":"An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting in…","indicators":{"cves":["CVE-2026-112368"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.650Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://jira.mongodb.org/browse/PHPC-276","label":"cna@mongodb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-10149","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2025-10149 — The SCIM endpoint does not sufficiently validate authorization for federated users when performing o…","description":"The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including arbitra…","indicators":{"cves":["CVE-2025-10149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.007Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4438/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107186","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107186 — An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the n…","description":"An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rules to be run without authentication.","indicators":{"cves":["CVE-2026-107186"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.827Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107187","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107187 — A user can access any database details, such as usernames and passwords by sending a DWR request wit…","description":"A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chained with this vulnerability to perform database reads without authentication. Database write and delete operations may a…","indicators":{"cves":["CVE-2026-107187"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.967Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed/","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-10572","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-10572 — IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arb…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options.","indicators":{"cves":["CVE-2026-10572","CVE-2026-10574"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:01.440Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-10743","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-10743 — IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to i…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations.","indicators":{"cves":["CVE-2026-10743"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:02.107Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12148","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-12148 — IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially ex…","description":"IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.","indicators":{"cves":["CVE-2026-12148"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:17.120Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12665","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-12665 — IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when p…","description":"IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment.","indicators":{"cves":["CVE-2026-12665"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:18.773Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-6930","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-6930 — IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an…","description":"IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.","indicators":{"cves":["CVE-2026-6930","CVE-2026-6719"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:21.757Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-52290","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2025-52290 — A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-11…","description":"A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file.","indicators":{"cves":["CVE-2025-52290"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.040Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://ffmpeg.org","label":"cve@mitre.org","domainType":"other"},{"url":"https://infosec.exchange/@sigdevel/116733488628458667","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111759","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-111759 — markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, spe…","description":"markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes fol…","indicators":{"cves":["CVE-2026-111759"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:00.570Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/markdown-it/markdown-it/commit/1b379c1b6d0522421bd1a51b77337c79af2c8670","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/commit/cf27366035edf9196667110c47d9d67b030a4152","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/commit/daf5a3c32303e5d9de01b12eeb725fb5990b8162","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/14.3.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/15.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/security/advisories/GHSA-r7fv-28h4-cvq7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/security/advisories/GHSA-r7fv-28h4-cvq7","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112377","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112377 — CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence…","description":"CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuine attester. Attackers holding an extracted attested TLS private key can forward the relying party's nonce to a genuine a…","indicators":{"cves":["CVE-2026-112377"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:05.490Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://datatracker.ietf.org/doc/draft-intra-handshake-fail/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/CCC-Attestation/attested-tls-poc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/CCC-Attestation/attested-tls-poc/pull/58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/CCC-Attestation/attested-tls-poc/tree/5b6c5374b3fe8b671906c8ab32f6134d9c3da26d/relay-attacks-formal","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ionut-arm/mbedtls/blob/f4ac7593826a506fc509c83cad73786acab1d442/library/ssl_tls13_generic.c#L430-L436","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/muhammad-usama-sardar/intra-handshake.fail","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-attestation-relay-attack","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3295","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-3295 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑su…","description":"IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing ma…","indicators":{"cves":["CVE-2026-3295"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.263Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290183","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112252","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112252 — A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production…","description":"A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xp_cmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely.…","indicators":{"cves":["CVE-2026-112252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:27.157Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/Rookie506/CVE/issues/2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112252","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986410","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422334","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422334/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112260","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112260 — A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a hea…","description":"A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.","indicators":{"cves":["CVE-2026-112260"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:52.970Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112260","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555730","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112770","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112770 — Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in…","description":"Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string arrow arguments as callables without the checkArrow guard used by other arrow-accepting filters. Authenticated control panel users can pass an array-cal…","indicators":{"cves":["CVE-2026-112770"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.060Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-xmwr-88vw-5ghh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-before-4.18.8-and-5.11.0-authenticated-rce-via-twig-group-filter-array-callable","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112772","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112772 — Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authen…","description":"Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox via Asset::getMimeType transforms. Attackers can supply 'as' or 'on' keys passed unfiltered to Craft::createObject, attaching malicious behaviors…","indicators":{"cves":["CVE-2026-112772","CVE-2026-112773"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.340Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-qm9x-rmcj-h2rc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-rce-via-asset-getmimetype-transform-injection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-wr79-9v6x-5rfq","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-rce-via-twig-sandbox-behavior-injection","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112774","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112774 — Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authen…","description":"Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to inject Yii behaviors by supplying a JSON-string field layout to ContentBlock::setFieldLayout(). Attackers with allowAdminChanges enabled can include 'as X' or 'on X' keys tha…","indicators":{"cves":["CVE-2026-112774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.620Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-j6r9-fxgv-j7x5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.8.0-before-5.11.0-admin-rce-via-contentblock-field-layout","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112775","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112775 — Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attac…","description":"Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate them for active users. Attackers who obtain a victim's emailed code can submit it to users/set-password after the victim…","indicators":{"cves":["CVE-2026-112775"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.757Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-xh42-494x-2xgv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-5.0.0-before-5.11.0-verification-code-reuse-via-users-set-password","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112777","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112777 — Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() f…","description":"Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its class-name checks are case-sensitive while PHP class resolution is not. Attackers with template-execution rights, such as Control Panel administrators, can instantiate SplFileObjec…","indicators":{"cves":["CVE-2026-112777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.043Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-w643-x88w-6wcm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-before-4.18.8-and-5.11.0-twig-create-blocklist-bypass-leading-to-rce","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112780","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112780 — Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to…","description":"Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can smuggle data-*@ directives past the callable check to invoke Folder::dele…","indicators":{"cves":["CVE-2026-112780"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.473Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-9rq7-4cch-f22j","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-2.0.15-before-2.2.2-arbitrary-static-method-call-via-flex-form-replace-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112782","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112782 — Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability…","description":"Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous visitors to bypass the system.images.max_pixels limit when system.images.url_actions is enabled. Attackers can send single-dimension or percentage forceResize, zoomCrop, or chai…","indicators":{"cves":["CVE-2026-112782"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.787Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-8gr9-59p6-r488","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-before-1.7.53.5-and-2.2.2-image-pixel-limit-bypass-denial-of-service","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-71169","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-71169 — Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for…","description":"Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Disclosure of sensitive information","indicators":{"cves":["CVE-2026-71169"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:20:03.053Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506927/dsa-2026-411-security-update-for-dell-application-store-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-71170","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-71170 — Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerabi…","description":"Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arbitrary code execution.","indicators":{"cves":["CVE-2026-71170"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:20:03.693Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506927/dsa-2026-411-security-update-for-dell-application-store-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-82166","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-82166 — Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical F…","description":"Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution.","indicators":{"cves":["CVE-2026-82166"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:20:06.313Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000506927/dsa-2026-411-security-update-for-dell-application-store-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112301","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112301 — A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue…","description":"A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been released…","indicators":{"cves":["CVE-2026-112301"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.863Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://gist.github.com/0xSebin/834b7ab2e72d68be51d204193f427a20","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112301","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/987724","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422347","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422347/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76788","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-76788 — The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes r…","description":"The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For the REPLY_KEYPPAD and REPLY_RAW reply types, the payload length is taken from the received frame and the only validation p…","indicators":{"cves":["CVE-2026-76788"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:18:01.380Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/f10d55f47c6970e95d3a7c6ba08e6adec3c79acd","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fgg7-h8p9-9q3w","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105814","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105814 — TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafte…","description":"TP-Link Tapo\nC210 V3.60 contains an authentication bypass vulnerability in the DS JSON API.\nA crafted JSON request containing both a protected operation and public\nonboarding-related fields may cause module-level authorization checks to be\napplied inconsistently, allowing protected camera operations…","indicators":{"cves":["CVE-2026-105814"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:03.027Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.tp-link.com/us/support/download/tapo-c210/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5352/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105815","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105815 — TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through una…","description":"TP-Link Tapo\nC210 V3.60 may expose shared credential material and cryptographic metadata\nthrough unauthenticated DS JSON API requests. The exposed shared credential can\nbe accepted by the Streamd Digest authentication mechanism as an administrative\npassword, allowing an unauthenticated adjacent-netw…","indicators":{"cves":["CVE-2026-105815"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:03.153Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://www.tp-link.com/us/support/download/tapo-c210/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5352/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112257","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112257 — A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with…","description":"A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and…","indicators":{"cves":["CVE-2026-112257"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:05.420Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112257","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555574","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112258","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112258 — A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list wh…","description":"A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execu…","indicators":{"cves":["CVE-2026-112258"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:05.543Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112258","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555588","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112261","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112261 — A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path…","description":"A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.","indicators":{"cves":["CVE-2026-112261"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:05.767Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112261","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555748","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112360","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-112360 — A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the f…","description":"A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of complex…","indicators":{"cves":["CVE-2026-112360"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.217Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-112360","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/990050","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422394","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422394/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53995","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-53995 — MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend…","description":"MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit Fil…","indicators":{"cves":["CVE-2026-53995"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:11.013Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/SaiTeja-Erukude/CVE-2026-53995-mlflow-path-traversal","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mlflow/mlflow/pull/26842","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/mlflow-path-traversal-via-trace-id-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105453","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105453 — IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow…","description":"IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.","indicators":{"cves":["CVE-2026-105453"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:23.400Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292735","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107366","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107366 — IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership ver…","description":"IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID…","indicators":{"cves":["CVE-2026-107366"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:25.640Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7293016","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107400","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-107400 — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to…","description":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.","indicators":{"cves":["CVE-2026-107400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:25.790Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292418","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109126","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109126 — IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a…","description":"IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.","indicators":{"cves":["CVE-2026-109126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:30.370Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292606","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105297","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105297 — Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the…","description":"Summary\n\n\n\nBefore version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded header-list size and no limit on concurrent streams. A remote, unauthenticated client can send 1-byte HPACK references to a near-empty header, making the serv…","indicators":{"cves":["CVE-2026-105297"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:09.613Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cloudflare/pingora","label":"cna@cloudflare.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109440","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109440 — LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote…","description":"LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web content retrieved by the agent. Because Bash and ExecuteCode lack an allow-list and human-in-the-loop approval, attackers…","indicators":{"cves":["CVE-2026-109440"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.103Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/agent/agent.py#L524","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109440","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/langalpha-through-2026.09.07-indirect-prompt-injection-rce-via-bash-and-executecode","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109443","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109443 — JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated us…","description":"JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the age…","indicators":{"cves":["CVE-2026-109443"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.527Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/jd-opensource/JoySafeter/blob/12234a11a9d96acef85577afb1fa5682169d6171/backend/app/core/agent/backends/utils/command_executor.py#L110","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jd-opensource/JoySafeter/blob/12234a11a9d96acef85577afb1fa5682169d6171/backend/app/services/copilot_service.py#L106","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109443","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/joysafeter-through-1.0.0-authenticated-rce-via-copilot-standard-mode-shell","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109444","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-109444 — OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers…","description":"OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presenter's execution_allowed() always returns True. Attackers can inject instructions into alerts or Slack messages triaged by…","indicators":{"cves":["CVE-2026-109444"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.673Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/gateway/transports/slack/processing/dispatcher.py#L276","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Tracer-Cloud/opensre/blob/8eba8c9301fa954d9eecb1693b7e2021215ec2ec/tools/interactive_shell/subprocess_presenter.py#L41","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109444","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/opensre-through-0.1.2026.10.19-approval-gate-bypass-via-shell-run-prompt-injection","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77926","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77926 — Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin user…","description":"Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated deepagents execute tool. Attackers can send crafted chat input to POST /dify/get_answer or upload documents with malicious…","indicators":{"cves":["CVE-2026-77926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.213Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/apconw/Aix-DB/blob/5d370adf3e695fc8b11137e5beeb01973cb46810/agent/common/enhanced_common_agent.py#L237","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77926","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aix-db-1.2.4-authenticated-rce-via-chatbi-common-agent-execute-tool","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77930","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77930 — EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to r…","description":"EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt_on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start_asy…","indicators":{"cves":["CVE-2026-77930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.360Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/EvoScientist/EvoScientist/blob/ac58caab7bdd1706f3fee55891f611cd175d05b0/EvoScientist/subagents/_factory.py#L116","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EvoScientist/EvoScientist/commit/d249e320bd856a7d31d859cfbb2bf75bab6c8686","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EvoScientist/EvoScientist/issues/387","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EvoScientist/EvoScientist/releases/tag/v0.2.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77930","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/evoscientist-0.1.0-before-0.2.5-human-approval-bypass-via-async-sub-agents","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77934","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77934 — Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user…","description":"Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 subprocess. Attackers can bypass the regex import filter with __import__('subprocess') to run commands, stealing environmen…","indicators":{"cves":["CVE-2026-77934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.823Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/coze-dev/coze-studio/blob/ffec252d9e2600f61d49b8228a642335e84d5496/docker/.env.example#L234","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coze-dev/coze-studio/commit/fcf40d1008c100108c23be051a49950283f2c2cf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77934","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/coze-studio-before-0.5.0-rce-via-unsandboxed-local-python-code-runner","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77935","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77935 — Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go…","description":"Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying foreign workflowIDs. Attackers can pair their own spaceID with another tenant's workflowID in save, update_meta, batch_de…","indicators":{"cves":["CVE-2026-77935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:19.970Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/coze-dev/coze-studio/blob/72cecff858a5a18662c5d9d1a4764c53ebc98317/backend/application/workflow/workflow.go#L303","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77935","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/coze-studio-through-0.5.1-cross-space-workflow-idor-via-workflow-api-handlers","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77937","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-77937 — Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impe…","description":"Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers can set user_id to another tenant's ID, even with LETTA_SERVER_SECURE enabled, to read and modify that user's agents, me…","indicators":{"cves":["CVE-2026-77937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.263Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/server/rest_api/dependencies.py#L39","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77937","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/letta-through-0.16.8-cross-tenant-impersonation-via-user-id-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105299","source":"nvd","category":"vulnerability","severity":"high","title":"CVE-2026-105299 — Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream reques…","description":"Summary\n\n\n\nBefore version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without removing the client's Connection header, other hop-by-hop headers, or the headers Connection nominated, although RFC 9110 Sect…","indicators":{"cves":["CVE-2026-105299"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:08.703Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cloudflare/pingora","label":"cna@cloudflare.com","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-911b4fe6d1761eed5bc7ade69ac55b3c8f726cbd7e3d613ea34bd2bbf107e9c6","source":"malware-bazaar","category":"malware","severity":"high","title":"Price Request List  #GSGPRO202600197.exe","description":"File type: exe | Reporter: threatcat_ch","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"3538ff52e4bd1fb7c700d3a68a4d7c2b","sha1":"f5709ca7b5cb96bb8cc574b6cd7154cab8de80b6","sha256":"911b4fe6d1761eed5bc7ade69ac55b3c8f726cbd7e3d613ea34bd2bbf107e9c6"}},"tags":["exe"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:57:45Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/911b4fe6d1761eed5bc7ade69ac55b3c8f726cbd7e3d613ea34bd2bbf107e9c6/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-80330f59bad607ce2d4918b2da68c01a3a6bdbb79ba4427fa49f96ae3b80839c","source":"malware-bazaar","category":"malware","severity":"high","title":"80330f59bad607ce.js","description":"File type: js | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"41df9baa7e7384c28d39b3bef659b4f4","sha1":"eded65f06b92938b46746c90eb01ef23d50c7d08","sha256":"80330f59bad607ce2d4918b2da68c01a3a6bdbb79ba4427fa49f96ae3b80839c"}},"tags":["js"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:56:07Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/80330f59bad607ce2d4918b2da68c01a3a6bdbb79ba4427fa49f96ae3b80839c/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-5414de616cb7cad3e8652004e8aff3a067ed97a30a781c2fe73bb5f029efac30","source":"malware-bazaar","category":"malware","severity":"high","title":"export.php","description":"File type: exe | Reporter: iamaachum","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"4e9b523f07c5e9ecd045597f5343c589","sha1":"088bc52858afc282cf1324088272efdc343be603","sha256":"5414de616cb7cad3e8652004e8aff3a067ed97a30a781c2fe73bb5f029efac30"}},"tags":["ClickFix","Efimer","exe"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:52:08Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/5414de616cb7cad3e8652004e8aff3a067ed97a30a781c2fe73bb5f029efac30/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-1a9d8635574518b8f27e220016cabc5b68d5cce8e56057a4545e4adc981c09ce","source":"malware-bazaar","category":"malware","severity":"high","title":"file","description":"File type: exe | Reporter: Bitsight","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"8e309a612d2160d8e250d86829a63fbb","sha1":"fc299229fecb8e3a6adc7af64bc244166c15cd64","sha256":"1a9d8635574518b8f27e220016cabc5b68d5cce8e56057a4545e4adc981c09ce"}},"tags":["dropped-by-Vidar","exe","f7e0bdc53604a00d861131d2693a943c","infostealer"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:46:50Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/1a9d8635574518b8f27e220016cabc5b68d5cce8e56057a4545e4adc981c09ce/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-78d62fc5a747d68ae531a1cd1e4f6a384545ca2dd5192abb5e9406855651a803","source":"malware-bazaar","category":"malware","severity":"high","title":"SecuriteInfo.com.Heur.10656.3336","description":"File type: msi | Reporter: SecuriteInfoCom","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"1def105adc234c8440300f28616e49ed","sha1":"65d8b11d17e0f564ad1811d9b06a20c1a8ad61a2","sha256":"78d62fc5a747d68ae531a1cd1e4f6a384545ca2dd5192abb5e9406855651a803"}},"tags":["msi"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:46:12Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/78d62fc5a747d68ae531a1cd1e4f6a384545ca2dd5192abb5e9406855651a803/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-570e354d5ba56a244fe1b6d08ae36a5c6e489fb53a710524afe065cedfac5f30","source":"malware-bazaar","category":"malware","severity":"high","title":"570e354d.ps1","description":"File type: ps1 | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"edf8fc2c9371c31a3e9abeba9884c214","sha1":"c6127231737cb89eed97f47c4019e0d38db1c3d7","sha256":"570e354d5ba56a244fe1b6d08ae36a5c6e489fb53a710524afe065cedfac5f30"}},"tags":["etherhiding","freight-lure","miner","powershell","telegram"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:21Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/570e354d5ba56a244fe1b6d08ae36a5c6e489fb53a710524afe065cedfac5f30/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9","source":"malware-bazaar","category":"malware","severity":"high","title":"vnc_bootstrap.ps1","description":"File type: ps1 | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"4b4d4981cced060972729091f7de789e","sha1":"a6a44cb3a32fce98bda658ad22510899e9f59205","sha256":"9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:19Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/9165aca66a9d89b749236dc2f49186c042cfff76acaba9696fc9b1b0e798fab9/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-696fc814fa188e918e59cf4046c7f62062a61f5ea1bf66da59961851db10a0d5","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v4.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"389b294da604ae04cff759451789754e","sha1":"821a54327280bb06801062002609c76e96c7c446","sha256":"696fc814fa188e918e59cf4046c7f62062a61f5ea1bf66da59961851db10a0d5"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:13Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/696fc814fa188e918e59cf4046c7f62062a61f5ea1bf66da59961851db10a0d5/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-c946dc76e0b39974450fb22127bef7b216f6217b5f36644a0ce8caedf330df18","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v3.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"6fa465d81afee23c47eb79fd025943ef","sha1":"d21aa451454952462f56dd4dcef8798bf48c1bf7","sha256":"c946dc76e0b39974450fb22127bef7b216f6217b5f36644a0ce8caedf330df18"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:10Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/c946dc76e0b39974450fb22127bef7b216f6217b5f36644a0ce8caedf330df18/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-11410cdf29bc1f1ded6fd7dae48e20cf71fd9cb11d8deafce54a76fd582c319e","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v2.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"5f3890d0e1a671e5b780e482defe2022","sha1":"f62bdba0d6d57fef2bbfb4b2603a8f8b6bc83fed","sha256":"11410cdf29bc1f1ded6fd7dae48e20cf71fd9cb11d8deafce54a76fd582c319e"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:07Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/11410cdf29bc1f1ded6fd7dae48e20cf71fd9cb11d8deafce54a76fd582c319e/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-4c56e9af087b0264e0e0c9cb061fd87151e10a544dff0c6b6bc37547ef05334a","source":"malware-bazaar","category":"malware","severity":"high","title":"main_v1.js","description":"File type: js | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"0fe4c5d41336b6048cc32106ac615ae2","sha1":"04457bac0c342e1eeee8a4bb1bdb64d4c5742d4e","sha256":"4c56e9af087b0264e0e0c9cb061fd87151e10a544dff0c6b6bc37547ef05334a"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:41:04Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/4c56e9af087b0264e0e0c9cb061fd87151e10a544dff0c6b6bc37547ef05334a/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-3913a1f77203ebb9e0991e1881279fa6172c9b8fde993fdc5d5be96254cd246f","source":"malware-bazaar","category":"malware","severity":"high","title":"hello.hta","description":"File type: hta | Reporter: Darkfibr","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"11e67c1d8c74edef80702d15b1561fff","sha1":"fe6160da01751c01bc68333cdf2b874fdd1f6c36","sha256":"3913a1f77203ebb9e0991e1881279fa6172c9b8fde993fdc5d5be96254cd246f"}},"tags":["etherhiding","freight-lure","nodejs","rat","vnc"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:40:56Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/3913a1f77203ebb9e0991e1881279fa6172c9b8fde993fdc5d5be96254cd246f/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-0e814f4d934e4a574a914c319367dbe3793ee40ccf58ca3d26763d722216cbac","source":"malware-bazaar","category":"malware","severity":"high","title":"0e814f4d934e4a57.bin","description":"File type: macho | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"16c7a146c567d4e157b78e0198a31f2b","sha1":"98f14e152b1672e940612aa3ebe375ace23096ef","sha256":"0e814f4d934e4a574a914c319367dbe3793ee40ccf58ca3d26763d722216cbac"}},"tags":["macho","snowlight"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:25:49Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/0e814f4d934e4a574a914c319367dbe3793ee40ccf58ca3d26763d722216cbac/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-884c70bde746092d710d0b217cd23bd314de54fc3a23d0f96928815d92222201","source":"malware-bazaar","category":"malware","severity":"high","title":"884c70bde746092d.bin","description":"File type: macho | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"d7ed538dd1824c4a5dfe703afc7f2321","sha1":"6563a3fbc448aad251cf472df06f87d2ad49594f","sha256":"884c70bde746092d710d0b217cd23bd314de54fc3a23d0f96928815d92222201"}},"tags":["macho"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:25:40Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/884c70bde746092d710d0b217cd23bd314de54fc3a23d0f96928815d92222201/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-48e9eab9bb48d75bd70a989fe1eaf610fbfdadf8fc21bbfd63dd40e2c2504ff7","source":"malware-bazaar","category":"malware","severity":"high","title":"48e9eab9bb48d75b.bin","description":"File type: elf | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"0735c9468434e0ac42203c8c5f87b755","sha1":"3ef830c6aff0108ff5eff5313685e87b2eb9b037","sha256":"48e9eab9bb48d75bd70a989fe1eaf610fbfdadf8fc21bbfd63dd40e2c2504ff7"}},"tags":["elf","gafgyt","mirai","botnet"],"malwareFamily":"Mirai","confidence":null,"publishedAt":"2026-10-20T02:25:32Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/48e9eab9bb48d75bd70a989fe1eaf610fbfdadf8fc21bbfd63dd40e2c2504ff7/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-05ca064a34061e79b6c21da0c508689eaf29369f850f27c86f645724b528990b","source":"malware-bazaar","category":"malware","severity":"high","title":"05ca064a34061e79.bin","description":"File type: macho | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"49b5f14740c549ecdf19c6be838de5ba","sha1":"a0972ed216cfafaceb6ef84f0d0e30501d935ea1","sha256":"05ca064a34061e79b6c21da0c508689eaf29369f850f27c86f645724b528990b"}},"tags":["macho"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:25:22Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/05ca064a34061e79b6c21da0c508689eaf29369f850f27c86f645724b528990b/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-92e1930e6de81598b979d0623013f768be028242e8b10ffa44785cb1b4d6f6ec","source":"malware-bazaar","category":"malware","severity":"high","title":"92e1930e6de81598.bin","description":"File type: elf | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"11743b0b6d35319e204573141575dd67","sha1":"8cc8f36ff9e6174776f5cb24bc4a7614fbfb43c4","sha256":"92e1930e6de81598b979d0623013f768be028242e8b10ffa44785cb1b4d6f6ec"}},"tags":["elf","Mirai","vshell","botnet"],"malwareFamily":"Mirai","confidence":null,"publishedAt":"2026-10-20T02:25:15Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/92e1930e6de81598b979d0623013f768be028242e8b10ffa44785cb1b4d6f6ec/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-085dc35f07a9b087da3a765ef388c04d751e01885a9d64fae7b14167ee0cccb7","source":"malware-bazaar","category":"malware","severity":"high","title":"085dc35f07a9b087.bin","description":"File type: elf | Reporter: Tuxxin","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"7f0aa27ca68fd034e83ca5d02a794a88","sha1":"6739f4b438064ffd49734bf69249dc8197164e48","sha256":"085dc35f07a9b087da3a765ef388c04d751e01885a9d64fae7b14167ee0cccb7"}},"tags":["elf","Snowlight","vshell"],"malwareFamily":"Snowlight","confidence":null,"publishedAt":"2026-10-20T02:25:06Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/085dc35f07a9b087da3a765ef388c04d751e01885a9d64fae7b14167ee0cccb7/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-0a7271ec4b47e3f4af8a0c86b0577a552d94268662da785fef2d13671bf0be0e","source":"malware-bazaar","category":"malware","severity":"high","title":"file","description":"File type: exe | Reporter: Bitsight","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"ead24d772b15a7700dbe9460dd145517","sha1":"9bd4fd9dd27cfea7cf027ea8c66a3ee098a7b544","sha256":"0a7271ec4b47e3f4af8a0c86b0577a552d94268662da785fef2d13671bf0be0e"}},"tags":["B","dropped-by-GCleaner","exe","MIX8.file"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:13:34Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/0a7271ec4b47e3f4af8a0c86b0577a552d94268662da785fef2d13671bf0be0e/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"malbaz-f189bdd403dd605860ef3430c3a6cde7690820647a1c878d8714e3728c845303","source":"malware-bazaar","category":"malware","severity":"high","title":"SecuriteInfo.com.Heur.9029.26114","description":"File type: msi | Reporter: SecuriteInfoCom","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"e7926f9d96c07198119d093c4555f29b","sha1":"f754dad5bd033f5c13d259d7d3388a362829888e","sha256":"f189bdd403dd605860ef3430c3a6cde7690820647a1c878d8714e3728c845303"}},"tags":["msi"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:00:29Z","fetchedAt":"2026-10-20T03:00:00.996Z","references":[{"url":"https://bazaar.abuse.ch/sample/f189bdd403dd605860ef3430c3a6cde7690820647a1c878d8714e3728c845303/","label":"MalwareBazaar","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad1d2421e774bf7224baf2b","source":"otx","category":"threat-intel","severity":"high","title":"Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection","description":"Since April 2017, a Russian-language affiliate program called Hotejka, believed to be a rebrand of ROI777, has operated the Help Traffic Distribution System (TDS), delivering tech support scams to victims. The operation uses browser fingerprinting and geolocation to redirect users through compromise…","indicators":{"cves":[],"ips":["91.196.33.144"],"domains":["roi777.com","roi-traffic.icu","hotejka.ink","lib1.biz","fosetya.shop","goalods.lol","hotcname.help","hotejka.com","hotns.rest","roi777.online","trixsolvesxa.shop","varbani.com","zylvantrexor.lol","usa.on1xvpn.com","usa.on1xvpn.ru"],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["tds infrastructure","ultraviewer","cloudflare pages abuse","tech support scams","roi777","hotejka","help tds","ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:29:06.044Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad1d2421e774bf7224baf2b","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad1d090651f974e1ec049ed","source":"otx","category":"threat-intel","severity":"high","title":"BREAK THE SILENCE: Tracking Silent Lynx Through Exposed Infrastructure","description":"Silent Lynx, a persistent cyber espionage threat actor, has conducted targeted intrusion campaigns against government ministries, diplomatic missions, and civil society organizations across Central Asia since 2024. The group focuses on high-value public sector organizations in Commonwealth of Indepe…","indicators":{"cves":["CVE-2025-25257","CVE-2025-8088"],"ips":["46.17.42.29","185.125.203.150","154.18.187.239","89.22.169.22","166.1.22.248","188.227.16.2","185.158.153.13","176.32.38.168","62.113.66.137","91.149.240.142","62.113.66.7","194.87.82.8","154.205.145.20","37.18.27.27","37.18.88.6","89.22.173.5","38.60.209.55","178.236.22.54","154.18.239.238","195.133.55.162","45.130.146.197","195.133.55.31","188.72.76.36","178.170.220.14","37.18.88.25","46.17.46.156","62.113.66.17","89.22.168.20","89.22.173.39","89.22.173.54","91.245.60.45","94.139.242.46","154.205.145.179","167.17.183.223","176.109.87.14","176.109.87.28","176.109.87.29","178.236.22.27","178.236.22.28","188.227.16.6","188.227.74.19","188.72.77.166","46.243.186.87"],"domains":["cs.access.ly","toolbox.ddns.net","q1q.ddns.net","repo-centos-webstatic-world.securitytactics.com","windows-update-catalog.serveftp.com","main.servecounterstrike.com","catalog-update-update-microsoft.serveftp.com","updates-check-microsoft.ddns.net","security-updates-microsoft.servehttp.com","microsoft-updates-windows.servehttp.com","alashsec.hopto.me","asan.zapto.org","auth-update-check.myddns.me","blog-tecnet-microsoft.serveftp.com","blog-tecnet-microsoft.servegame.com","blog-tecnet-microsoft.servehttp.com","catalog-update-microsoft.serveftp.com","catalog-update-microsoft.servehttp.com","catalog-update-unix-systems.servehttp.com","cdn-redhatcom.serveftp.com","cdn-redhatupdate.serveftp.com","darkpc.zapto.org","daww3420.myddns.me","debian-update-system.servehttp.com","domain-server-ms.securitytactics.com","drivers-microsoft-catalog.serveirc.com","drivers-windows-update.serveirc.com","english.read-books.org","esd.asan.gov.zapto.org","forti.access.ly","gov.zapto.org","gptbot.sytes.net","inform.zapto.org","it-support.workisboring.com","licensing-mp-microsoft.serveexchange.com","linux-update-system.serveftp.com","loading.hopto.me","mail-english.read-books.org","mail.english.read-books.org","maill.loginto.me","microsoft-secure-login.servehttp.com","microsoft-service-manager.serveftp.com","microsoft-update-catalog.servehttp.com","microsoft-updates-check-windows.serveftp.com","microsoft-ws-updates.serveftp.com","mirror-centos-vault.serveftp.com","msedge-api-cdp-microsoft.serveftp.com","n8nbot.sytes.net","networks.zapto.org","ntservicepack-update-microsoft.serveftp.com","repo-centos-webtatic.serveftp.com","repo-ubuntu-webstatic-world.securitytactics.com","repo-webtatic-server.servehttp.com","serviceupdate.dynns.com","support-center.serveexchange.com","support-service-update.serveftp.com","systeminfo.dynns.com","sysupdate.serveftp.com","telecommand-telemetry-microsoft.servehttp.com","terea.serveexchange.com","update-service-host.serveftp.com","upgrade.securitytactics.com","windows-config-update.myddns.me","windows-rms.servehttp.com","windows-update-server-microsoft.servehttp.com","windows-update-ws.servehttp.com","windows-update.damnserver.com","windowsupdate-microsoft-com.servehttp.com","www-mfa-gov-tm.dynns.com","corehost.ddns.net","ctldl-windowsupdate.ddns.net","dtco.ddns.net","ekolabrecycling.ddns.net","mail.mobatex.ddns.net","maill.ddns.net","mobatex.ddns.net","srv.corehost.ddns.net","support-center-freeexchange.ddns.net","windows-updates-check.ddns.net","geoanswer.ru","ekolabrecycling.kz","windows-srvcupdate.ddns.net","ws.servehttp.com"],"urls":["http://104.248.17.222:80/linux-update-repos.elf","http://154.205.145.179:8000/ligolo-mp_linux_amd64","http://62.113.66.137/WindowsUpdateService.ps1","http://62.113.66.137/WindowsUpdateService.vbs","http://62.113.66.137/comhost.exe","http://62.113.66.137/libcrypto-3.dll","http://62.113.66.137/libssl-3.dll","http://62.113.66.137/ssdpdrv.exe","http://updates-check-microsoft.ddns.net/1.pdf","http://updates-check-microsoft.ddns.net/MicrosoftOfficeUpdate.zip"],"hashes":{"md5":"ff7f4292400741a7ac17d6429142c9b1","sha1":"8b86bda10bdce0c199c95d67b055a562dace3720","sha256":"f3c278a83619ade385ba939891d1455bd3f8eceb4e94566be2f5d1ef1289586d"}},"tags":["silent lynx","chvost","laplas","cobalt strike","github staging","pickleshell","ssdpshell","cve-2025-25257","meterpreter","water infrastructure","ligolo-ng","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:21:52.444Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad1d090651f974e1ec049ed","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad0e1295c816b236074f6a2","source":"otx","category":"threat-intel","severity":"high","title":"skynox7: Proxyjacking Edge Devices Into Residential Proxies","description":"A malicious cyber actor conducted a proxyjacking campaign, compromising at least 143 network edge devices across 34 countries to force them into residential proxy networks. The attacker exploited vulnerabilities in D-Link ShareCenter NAS devices, Ubiquiti UniFi Video NVR systems, and SAP NetWeaver V…","indicators":{"cves":["CVE-2021-44228","CVE-2024-3272","CVE-2024-3273","CVE-2025-31324"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":"fdc18f4287c1c6a285c664d3ce0f17d3479bc246bc6c163eb90b1a84adb453a7"}},"tags":["bandwidth monetization","proxyjacking","dvr exploitation","cve-2024-3272","cve-2021-44228","cve-2024-3273","edge devices","iproyal","cve-2025-31324","residential proxies","network compromise","pawns.app","ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:20:25.839Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad0e1295c816b236074f6a2","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad187349cefc9d2193e5cc3","source":"otx","category":"threat-intel","severity":"high","title":"AI-Powered Espionage Campaign Targets Government Linux Infrastructure","description":"An espionage campaign tracked as CL-UNK-1211 targeted government entities and state-affiliated infrastructure between October 2025 and April 2026, utilizing AI-generated payloads containing conversational annotations suggesting LLM or automated AI agent involvement. Attackers focused on Linux enviro…","indicators":{"cves":["CVE-2021-4034","CVE-2025-55182","CVE-2017-7921","CVE-2021-21974","CVE-2021-3493","CVE-2022-21894","CVE-2022-30190","CVE-2022-26134","CVE-2022-31199","CVE-2022-47986","CVE-2021-33044","CVE-2022-36553","CVE-2023-1389","CVE-2023-2868","CVE-2023-34362","CVE-2023-22518","CVE-2023-46604","CVE-2023-36025","CVE-2024-21412","CVE-2024-3400","CVE-2024-40766","CVE-2024-7344","CVE-2025-0994","CVE-2025-3248","CVE-2025-49704","CVE-2025-49706","CVE-2025-53770","CVE-2025-53771","CVE-2025-21042","CVE-2026-21509","CVE-2024-23625","CVE-2025-34035"],"ips":["88.119.167.57","198.23.185.234","185.21.136.6","109.224.53.140","154.93.37.228","124.163.212.119"],"domains":["subprocess.call","magento.ink","solidmonpe.com","wibu-bau-bawang.online","beraskencur.site"],"urls":[],"hashes":{"md5":"d75cb9920d1d3d280518ddccfe4789d2","sha1":"18821dbb53892d6faa14b1f063517a0302057290","sha256":"b1e82c6b0caea177e8bb71ad826867f509c65f0a43a651b50253e7c726566eac"}},"tags":["database exfiltration","sysgorat","web shells","linux","cve-2025-55182","ai-generated payloads","cve-2021-4034","espionage","defense evasion","government targeting","rat","proxy backdoor","cve-2025-34035","cve-2022-36553","iot exploitation","edge device targeting","botnet","cve-2024-23625","clingstun","stun abuse","mirai","device persistence","nat traversal"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T02:08:52.038Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad187349cefc9d2193e5cc3","label":"OTX Pulse","domainType":"primary"},{"url":"https://otx.alienvault.com/pulse/6acf7922d9bc17d95d27ec5c","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6acf8736e6d91800bcdb734a","source":"otx","category":"threat-intel","severity":"high","title":"Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus","description":"A coordinated disruption action targeted Chinese-speaking cybercriminals operating three major phishing kits: CoGUI, CoAceV, and CoFish_Ws, which collectively distributed hundreds of millions of credential phishing messages primarily targeting Japanese organizations. These operations impersonated 66…","indicators":{"cves":[],"ips":[],"domains":["lygyaou.com","kenandy.shop","new-app-haixing.com","ylhgkj.com","1dwsd1dedf.kumamoto-city.jp","9aiolnhtdi.kumamoto-city.jp","bcuxktpfkz.kumamoto-city.jp","paidy.farradae.com"],"urls":["https://kenandy.shop/paidy/ubmisionsjp/","https://lygyaou.com/9AioLNhtdi.kumamoto-city.jp","https://new-app-haixing.com/1DWSd1DeDf.kumamoto-city.jp","https://paidy.farradae.com/paidy/ubmissionsjp","https://ylhgkj.com/BCuXkTPfKZ.kumamoto-city.jp"],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["financial fraud","cofish_ws","iron man","coacev","domain seizure","credential phishing","japanese targets","cogui","chinese-speaking cybercriminals","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:44:22.828Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6acf8736e6d91800bcdb734a","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6acec272f01b1f0cac6ecb2a","source":"otx","category":"threat-intel","severity":"high","title":"Clean Install, Stolen Creds: Fake WatchGuard VPN Site Serves Genuine Signed Client","description":"In early October, a sophisticated credential phishing campaign targeted WatchGuard Mobile VPN users through a fake download site at watchguard-vpn[.]net. The attack used SEO poisoning to appear in search results and deployed a unique technique: after collecting victim credentials twice through brows…","indicators":{"cves":[],"ips":[],"domains":["watchguard-vpn.com","watchguard-vpn.net","www.watchguard-vpn.net","watchguard-ssl.online"],"urls":["http://watchguard-vpn.net/index.php","https://www.watchguard-vpn.net/"],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["watchguard impersonation","signed installer abuse","fake download site","seo poisoning","credential phishing","browser pop-up","vpn targeting","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T23:44:50.179Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6acec272f01b1f0cac6ecb2a","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"news-wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites","source":"general-news","category":"news","severity":"high","title":"WordPress SEO plugin Rank Math compromised to backdoor websites","description":"Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:24:51.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/wordpress-seo-plugin-rank-math-compromised-to-backdoor-websites/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack","source":"general-news","category":"news","severity":"high","title":"Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack","description":"ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T15:18:51.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-ghostaction-attackers-plant-credential-stealer-disguised-as-font-in-94-github-re","source":"general-news","category":"news","severity":"high","title":"GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories","description":"The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file.\n\nThe latest evolution, detailed by OpenSourceMalware…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","supply-chain","infostealer"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:05:45.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-malfex-npm-package-imgdecode-hides-shellcode-loader-in-windows-native-addon","source":"general-news","category":"news","severity":"high","title":"MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon","description":"Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.\n\nThe package, named \"imgdecode,\" was uploaded to the package registry on September 30, 2026, by a user named \"malfexteste8.\" It has been download…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T11:11:56.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-cisa-urges-immediate-ivanti-connect-secure-updates-as-honeypots-log-105-exploit-","source":"general-news","category":"news","severity":"high","title":"CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts","description":"The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability.\n\nThe security flaw,…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T12:30:42.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-anthropic-warns-small-ai-models-could-soon-form-self-propagating-iot-botnets","source":"general-news","category":"news","severity":"high","title":"Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets","description":"Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic.\n\nThe frontier AI lab said small AI models could form autonomous, self-propagating worm bo…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:20:57.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/anthropic-warns-small-ai-models-could.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-rank-math-pro-wordpress-plugin-compromised-in-supply-chain-attack","source":"general-news","category":"news","severity":"high","title":"Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack","description":"Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.\nThe post Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:20:53.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/rank-math-pro-wordpress-plugin-compromised-in-supply-chain-attack/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-mitre-att-ck-v20-catalogs-ai-abuse-mfa-bypass-water-utility-attacks","source":"general-news","category":"news","severity":"high","title":"MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks","description":"Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.\nThe post MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:37:04.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/mitre-attck-v20-catalogs-ai-abuse-mfa-bypass-water-utility-attacks/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-suspends-cloud-backup-service-after-supply-chain-attack","source":"general-news","category":"news","severity":"high","title":"ConnectWise suspends Cloud Backup service after supply chain attack","description":"ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and confirmed such access on Saturday.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:45:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://therecord.media/connectwise-suspends-cloud-backup-service-supply-chain-attack","label":"The Record","domainType":"media"}],"feedLabel":null},{"id":"cisa-adv-cyber-threat-actors-use-a-variety-of-techniques-to-target-election-and-campaign-","source":"cisa-advisories","category":"advisory","severity":"medium","title":"Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials ","description":"CISA and the Federal Bureau of Investigation (FBI) released a Public Service Announcement (PSA) warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. Malicious cyber actors may use phishing and smishing techniques to steal login credentials and other sen…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/resources-tools/resources/cyber-threat-actors-use-variety-techniques-target-election-and-campaign-officials","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108939","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108939 — A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_g…","description":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been dis…","indicators":{"cves":["CVE-2026-108939"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:00.343Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/EricLBuehler/mistral.rs/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/commit/cfb8c6a0c","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/commit/cfb8c6a0c42361dc4579a9110b54d339c255b9fd","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/pull/2446","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/releases/tag/v0.9.4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108939","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997600","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416763","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416763/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108940","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108940 — A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the functi…","description":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument save_cimatrix results in path traversal. The attack may be initiated remotely. The exp…","indicators":{"cves":["CVE-2026-108940"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:00.523Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/EricLBuehler/mistral.rs/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/commit/8c8105671","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/commit/8c81056712709b4845ec6d9531e4d35bab4a367c","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/pull/2445","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/EricLBuehler/mistral.rs/releases/tag/v0.9.4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108940","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997601","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416764","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416764/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997601","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108941","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108941 — A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_c…","description":"A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfg_args leads to code injection. The attack can only be performed from a local environm…","indicators":{"cves":["CVE-2026-108941"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:00.700Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/Linketic/CityGaussian/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Linketic/CityGaussian/issues/206","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108941","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997639","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416766","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416766/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17484","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17484 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improp…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.","indicators":{"cves":["CVE-2026-17484"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:00.870Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290096","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17487","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17487 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the ret…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.","indicators":{"cves":["CVE-2026-17487"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.007Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290096","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-18318","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-18318 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication.","indicators":{"cves":["CVE-2026-18318"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.137Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290096","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-18343","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-18343 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.","indicators":{"cves":["CVE-2026-18343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.270Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290194","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19936","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19936 — The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c sha…","description":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one k_work_delayable between two cooperative threads with no synchronization: bt_mesh_delayable_msg_manage() runs on the Bluetooth host…","indicators":{"cves":["CVE-2026-19936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.397Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/0a6da68955f454edc41e4b916e05c3b974209fe4","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-4p55-7h77-fhgr","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-19937","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19937 — The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c…","description":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT message contexts (default 4) threaded onto a free_ctx or busy_ctx list. release_delayable_msg_ctx() returned a context to free_ctx o…","indicators":{"cves":["CVE-2026-19937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.533Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/097001f187ba2764e9ef1cc7113b8da525bf741c","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5rrx-xww6-5xrh","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-19938","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19938 — The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_se…","description":"The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in subsys/bluetooth/host/att.c documents (and every other error exit implements) the contract that on failure the caller retains ownership of the net_buf; the BT_ATT_OP_SIGNED_WRITE_CMD branch in…","indicators":{"cves":["CVE-2026-19938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.657Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/ba8627d91c8ce15c26224cbc7f7f92bb66f56b03","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p3r4-qw98-j59m","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-81858","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-81858 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of servic…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.","indicators":{"cves":["CVE-2026-81858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T00:17:01.807Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290195","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108943","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108943 — A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokeniz…","description":"A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component Tokenizer. This manipulation of the argument auto_map causes code injection. The attack is restricted…","indicators":{"cves":["CVE-2026-108943"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:42.507Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/ModelTC/LightX2V/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ModelTC/LightX2V/issues/1559","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108943","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997679","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416768","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416768/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/ModelTC/LightX2V/issues/1559","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108944","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108944 — A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb…","description":"A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function get_obj_from_str of the file src/utils/model_utils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targ…","indicators":{"cves":["CVE-2026-108944"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:42.707Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/bytetriper/RAE/issues/82","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108944","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997719","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416769","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416769/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108945","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108945 — A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Aff…","description":"A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kpt_shape results i…","indicators":{"cves":["CVE-2026-108945"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:42.893Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/iMoonLab/yolov13/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/iMoonLab/yolov13/issues/81","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108945","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997729","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416770","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416770/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76972","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76972 — Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence,…","description":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this stored content, the injected input is processed duri…","indicators":{"cves":["CVE-2026-76972"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:46.717Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3798823","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76975","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76975 — Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could gener…","description":"Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled input and writes it into the DOM without proper saniti…","indicators":{"cves":["CVE-2026-76975"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:46.847Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3794572","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76976","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76976 — Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently…","description":"Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user. If the victim interacts with the affected content, malicious scri…","indicators":{"cves":["CVE-2026-76976"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:46.977Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3671819","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89105","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89105 — The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accept…","description":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that shou…","indicators":{"cves":["CVE-2026-89105"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.240Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/SAP/cloud-security-services-integration-library/security/advisories/GHSA-857v-p42q-f3qf","label":"cna@sap.com","domainType":"primary"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89106","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89106 — SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with…","description":"SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availabi…","indicators":{"cves":["CVE-2026-89106"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:47.373Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3799054","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89112","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89112 — The admin API endpoint used to retrieve CLA signature records does not consistently enforce the requ…","description":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing con…","indicators":{"cves":["CVE-2026-89112"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:48.027Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/cla-assistant/cla-assistant/security/advisories/GHSA-8rcv-xqgf-8743","label":"cna@sap.com","domainType":"primary"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89116","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89116 — The affected code used child_process.execSync with a shell string for generator installation and uni…","description":"The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installationLocation VS Code workspace configuration value.…","indicators":{"cves":["CVE-2026-89116"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:48.277Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/SAP/app-studio-toolkit/security/advisories/GHSA-vm9q-mf35-jwpx","label":"cna@sap.com","domainType":"primary"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89117","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89117 — SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into…","description":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal cont…","indicators":{"cves":["CVE-2026-89117"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:48.433Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3779985","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89118","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89118 — SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources an…","description":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application.","indicators":{"cves":["CVE-2026-89118"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:48.680Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3789825","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89121","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89121 — SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification…","description":"SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges and local access to the system could bypass authorization checks to modify data belonging to objects they are not author…","indicators":{"cves":["CVE-2026-89121"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:48.990Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3799621","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89122","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89122 — SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component.…","description":"SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allow t…","indicators":{"cves":["CVE-2026-89122"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:49.137Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3790401","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89124","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89124 — Display Product Catalog Based on Customs Declaration application does not perform sufficient authori…","description":"Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privileged user to access sensitive information beyond their intended authorization scope. This vulnerability has low impact o…","indicators":{"cves":["CVE-2026-89124"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:49.267Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3810872","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100755","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100755 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurations, could have allowed an authenticated user to poison cached page content served to other users due to improper cache…","indicators":{"cves":["CVE-2026-100755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:55.883Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/627507","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101168","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101168 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to in…","indicators":{"cves":["CVE-2026-101168"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:56.027Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab-pages/-/work_items/1187","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104661","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104661 — GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 bef…","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and…","indicators":{"cves":["CVE-2026-104661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:56.293Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/621386","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108947","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108947 — A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loa…","description":"A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of the argument src_ckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been publis…","indicators":{"cves":["CVE-2026-108947"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:57.127Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/yoshitomo-matsubara/torchdistill/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/yoshitomo-matsubara/torchdistill/issues/550","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/yoshitomo-matsubara/torchdistill/issues/550#issuecomment-5826644846","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108947","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997819","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416771","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416771/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108948","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108948 — A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affec…","description":"A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. The manipulation of the argument usertype_id leads to dynamicall…","indicators":{"cves":["CVE-2026-108948"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:57.323Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://code-projects.org/","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/thuong2206/Online-Reviewer-System-Privilege-Escalation","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108948","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997820","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416772","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416772/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/thuong2206/Online-Reviewer-System-Privilege-Escalation","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108954","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108954 — A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function Offlin…","description":"A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the argum…","indicators":{"cves":["CVE-2026-108954"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:57.503Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/k2-fsa/sherpa-onnx/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/k2-fsa/sherpa-onnx/issues/3983","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/k2-fsa/sherpa-onnx/issues/3983#issuecomment-5871985324","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108954","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997824","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416773","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416773/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108955","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108955 — A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4…","description":"A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the component GGUF Parser. This manipulation of the argument data_offset causes out-of-bounds read. The attack requires local acces…","indicators":{"cves":["CVE-2026-108955"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:57.690Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/Tiiny-AI/PowerInfer/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Tiiny-AI/PowerInfer/issues/283","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108955","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997844","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416774","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416774/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14210","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-14210 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify…","indicators":{"cves":["CVE-2026-14210"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:58.060Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/604538","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3741505","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14552","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-14552 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Guest access to read confidential epic content meant to be restricted by external au…","indicators":{"cves":["CVE-2026-14552"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:58.200Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/604841","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3809364","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16275","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-16275 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read confidential notes on public projects due to incorrect authorization checks.","indicators":{"cves":["CVE-2026-16275"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:58.457Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/606490","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3815259","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-5954","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-5954 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.","indicators":{"cves":["CVE-2026-5954"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:59.410Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/596139","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3641043","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-6567","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-6567 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with reporter role to access restricted CI artifact report content they were not authoriz…","indicators":{"cves":["CVE-2026-6567"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:59.547Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/597328","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3603015","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-7767","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-7767 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an…","indicators":{"cves":["CVE-2026-7767"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:59.803Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/598965","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3597095","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84284","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84284 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect authorizat…","indicators":{"cves":["CVE-2026-84284"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:17:00.190Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/627167","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3551698","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92528","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92528 — GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 be…","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to approve a merge request despite having contributed commits to it, due to improper identi…","indicators":{"cves":["CVE-2026-92528"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:17:00.443Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/606772","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108957","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108957 — A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b5…","description":"A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the file tinyllava/model/configuration_tinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument…","indicators":{"cves":["CVE-2026-108957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T03:16:40.193Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/TinyLLaVA/TinyLLaVA_Factory/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/TinyLLaVA/TinyLLaVA_Factory/issues/212","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108957","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997884","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416776","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416776/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/TinyLLaVA/TinyLLaVA_Factory/issues/212","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108958","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108958 — A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph…","description":"A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument model_config can lead to deserialization. The attack can be executed remotely. The explo…","indicators":{"cves":["CVE-2026-108958"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T03:16:40.390Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/tensorlayer/TensorLayer/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/tensorlayer/TensorLayer/issues/1169","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108958","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997885","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416777","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416777/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108959","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108959 — A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This imp…","description":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclose…","indicators":{"cves":["CVE-2026-108959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T03:16:40.580Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/baijuyiqs/submit/issues/1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://itsourcecode.com/","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-108959","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997932","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416778","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416778/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108960","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108960 — A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4.…","description":"A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-split Loader. The manipulation results in out-of-bounds read. The a…","indicators":{"cves":["CVE-2026-108960"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T03:16:40.760Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/Tiiny-AI/PowerInfer/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Tiiny-AI/PowerInfer/issues/284","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108960","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997933","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416779","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416779/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109786","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109786 — In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts…","description":"In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an \"on <token>\" suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as \"x VICTIM-SOURCE-IP-ADDRESS on\" to make…","indicators":{"cves":["CVE-2026-109786"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T03:16:40.943Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://coredump.ws/repos/mail-hardening.git/","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/fail2ban/fail2ban/commit/ddd879d22664904ace24e1255ac6571808c58187","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108961","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108961 — A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the fun…","description":"A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file paddlex/inference/models/text_detection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is poss…","indicators":{"cves":["CVE-2026-108961"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T04:17:10.867Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/PaddlePaddle/PaddleX/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/PaddlePaddle/PaddleX/issues/5210","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/PaddlePaddle/PaddleX/pull/5212","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108961","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997956","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416780","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416780/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108962","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108962 — A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7…","description":"A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig._file2dict of the file local_groundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the argu…","indicators":{"cves":["CVE-2026-108962"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T04:17:11.130Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/storyicon/comfyui_segment_anything/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/storyicon/comfyui_segment_anything/issues/114","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108962","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/998114","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416781","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416781/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/storyicon/comfyui_segment_anything/issues/114","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-89269","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89269 — The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and…","description":"The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with the Author role and above to store JavaScript that executes in the session of any user viewing the testimonials, includin…","indicators":{"cves":["CVE-2026-89269"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T06:17:03.683Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://wpscan.com/vulnerability/feff4b89-6ae6-487a-9187-ecb70778c83c/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89271","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89271 — The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of…","description":"The WP-BusinessDirectory  WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated attackers to write files with arbitrary content to arbitrary locations, though not to execute code on a default server conf…","indicators":{"cves":["CVE-2026-89271"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T06:17:04.050Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://wpscan.com/vulnerability/78b3ade9-1614-4040-87be-c43dbc50b79e/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109106","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109106 — A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulner…","description":"A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Document Intake. The manipulation of the argument _display_name results in path traversal. The attack is only possible with local a…","indicators":{"cves":["CVE-2026-109106"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:16:31.863Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.google.com/document/d/1HtHrkT1NRX7ZY8uyu_C0F2Scp7wWDcor/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true","label":"cna@vuldb.com","domainType":"other"},{"url":"https://play.google.com/store/apps/details?id=com.infraware.office.link","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-109106","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/886481","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416857","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416857/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103417","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103417 — Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred…","description":"Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.","indicators":{"cves":["CVE-2026-103417"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:16:59.423Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068171","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-105/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109107","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109107 — A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function…","description":"A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available…","indicators":{"cves":["CVE-2026-109107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:16:59.680Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109107","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/907371","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416858","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416858/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/907371","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109703","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109703 — Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensi…","description":"Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1.","indicators":{"cves":["CVE-2026-109703"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:17:00.293Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/wp-graphql/vulnerability/wordpress-wpgraphql-plugin-2-23-1-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14308","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-14308 — Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient…","description":"Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.","indicators":{"cves":["CVE-2026-14308"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:17:00.440Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.manageengine.com/malware-protection/help/edr/insufficient-driver-signature-kb.html","label":"0fc0942c-577d-436f-ae8e-945763c79b02","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15399","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15399 — The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'co…","description":"The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it pos…","indicators":{"cves":["CVE-2026-15399"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:17:00.590Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.7/settings/counters/counter-01.php#L20","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.7/settings/counters/counter-01.php#L61","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.7/settings/helper/functions.php#L312","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.7/settings/helper/number-counter-save.php#L8","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.8/settings/counters/counter-01.php#L20","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.8/settings/counters/counter-01.php#L61","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.8/settings/helper/functions.php#L312","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/animated-number-counters/tags/2.8/settings/helper/number-counter-save.php#L8","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3603796/animated-number-counters/trunk/settings/counters/counter-01.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/animated-number-counters","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fed4591b-b7e3-4a55-a747-1c17f6c6f643?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-67165","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-67165 — HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this i…","description":"HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may allow the attacker steal cookie-based authentication credentials a…","indicators":{"cves":["CVE-2026-67165"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:17:00.780Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134059","label":"psirt@hcl.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89097","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89097 — The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Informati…","description":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer_hook. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive dat…","indicators":{"cves":["CVE-2026-89097"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:17:01.077Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.18/ad-inserter.php#L13304","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.18/ad-inserter.php#L4694","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.18/ad-inserter.php#L4755","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.18/ad-inserter.php#L4943","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3709957%40ad-inserter&new=3709957%40ad-inserter","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/60ef9840-12c3-408a-b304-3eff2fe33bb4?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103076","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103076 — Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration al…","description":"Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration allows Cross Site Request Forgery.This issue affects User Registration: from n/a through 5.2.8.","indicators":{"cves":["CVE-2026-103076"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:13.453Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106598","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106598 — Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retriev…","description":"Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8.","indicators":{"cves":["CVE-2026-106598"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:13.877Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-8-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108174","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108174 — Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploit…","description":"Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4.","indicators":{"cves":["CVE-2026-108174"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:14.010Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/woocommerce-currency-switcher/vulnerability/wordpress-fox-plugin-1-5-4-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108489","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108489 — Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tabl…","description":"Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Active Products Tables for WooCommerce: from n/a through 2.1.3.","indicators":{"cves":["CVE-2026-108489"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:14.553Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/profit-products-tables-for-woocommerce/vulnerability/wordpress-active-products-tables-for-woocommerce-plugin-2-1-3-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108492","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108492 — Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments…","description":"Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3.","indicators":{"cves":["CVE-2026-108492"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:14.827Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/quick-paypal-payments/vulnerability/wordpress-quick-paypal-payments-plugin-6-0-3-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108493","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108493 — Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocomme…","description":"Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1.","indicators":{"cves":["CVE-2026-108493"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:14.960Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/woocommerce-pay-for-payment/vulnerability/wordpress-pay-for-payment-for-woocommerce-plugin-3-0-1-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108496","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108496 — Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploi…","description":"Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.23.","indicators":{"cves":["CVE-2026-108496"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:15.233Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/wp-user-manager/vulnerability/wordpress-wp-user-manager-plugin-2-9-23-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109143","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109143 — A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects…","description":"A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The attac…","indicators":{"cves":["CVE-2026-109143"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:16.093Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://gist.github.com/k4z01/7f7739e59ae595f7bdd45922adf2b547","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109143","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/978033","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416882","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416882/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109684","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109684 — Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Config…","description":"Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.","indicators":{"cves":["CVE-2026-109684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:16.300Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-4-10-broken-access-control-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109696","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109696 — Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiti…","description":"Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.1.0.","indicators":{"cves":["CVE-2026-109696"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:16.700Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/fluent-boards/vulnerability/wordpress-fluentboards-plugin-2-1-0-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109144","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109144 — A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown…","description":"A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but did…","indicators":{"cves":["CVE-2026-109144"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:14.833Z","fetchedAt":"2026-10-20T03:01:48.432Z","references":[{"url":"https://github.com/wbond/certvalidator/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/wbond/certvalidator/issues/56","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109144","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/978613","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416883","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416883/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109149","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109149 — A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is…","description":"A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond…","indicators":{"cves":["CVE-2026-109149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:15.073Z","fetchedAt":"2026-10-20T03:01:48.432Z","references":[{"url":"https://github.com/beautifier/js-beautify/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/beautifier/js-beautify/issues/2522","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109149","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/978621","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416885","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416885/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109152","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109152 — A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is t…","description":"A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the component SCP Receive Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 0.16.2 is suffici…","indicators":{"cves":["CVE-2026-109152"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:15.260Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/jbardin/scp.py/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jbardin/scp.py/commit/42fc3aaa71411daed60544e3b40179c1038bed5d","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jbardin/scp.py/issues/206","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jbardin/scp.py/releases/tag/v0.16.2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109152","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/978646","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416886","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416886/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-44414","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-44414 — A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device K…","description":"A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Edg…","indicators":{"cves":["CVE-2026-44414"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:16.010Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-377139.html","label":"productcert@siemens.com","domainType":"other"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-832641.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63351","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63351 — Affected devices do not properly validate and sanitize visual properties of calculated signals conta…","description":"Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into imp…","indicators":{"cves":["CVE-2026-63351"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:17.200Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63352","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63352 — Affected devices do not properly sanitize calculated signal data contained in imported CSV trace fil…","description":"Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace…","indicators":{"cves":["CVE-2026-63352"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:17.623Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63355","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63355 — Affected devices do not properly sanitize signal names contained in imported CSV trace files before…","description":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially cr…","indicators":{"cves":["CVE-2026-63355"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:18.870Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63356","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63356 — Affected devices do not properly sanitize calculated signal names contained in imported CSV trace fi…","description":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a sp…","indicators":{"cves":["CVE-2026-63356"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:19.277Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63357","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63357 — Affected devices do not properly sanitize calculated signal data contained in imported calculated si…","description":"Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page.\r\n\r\nThis could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially craft…","indicators":{"cves":["CVE-2026-63357"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing","ics"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:19.710Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-591731.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89208","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89208 — A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital E…","description":"A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versi…","indicators":{"cves":["CVE-2026-89208"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:22.667Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-055299.html","label":"productcert@siemens.com","domainType":"other"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-333035.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109153","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109153 — A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.ex…","description":"A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted earl…","indicators":{"cves":["CVE-2026-109153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T11:17:14.323Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/mosaicml/composer/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/mosaicml/composer/issues/3942","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109153","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/978647","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416887","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416887/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109155","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109155 — A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Mo…","description":"A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not resp…","indicators":{"cves":["CVE-2026-109155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T11:17:14.527Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/deeppavlov/DeepPavlov/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/deeppavlov/DeepPavlov/issues/1711","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109155","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/978673","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416888","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416888/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109156","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109156 — A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_e…","description":"A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th…","indicators":{"cves":["CVE-2026-109156"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T11:17:14.700Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/SeldonIO/MLServer/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/SeldonIO/MLServer/issues/2553","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109156","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/978677","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416889","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416889/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109160","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109160 — A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function…","description":"A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the ar…","indicators":{"cves":["CVE-2026-109160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T11:17:15.067Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109160","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979787","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416891","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416891/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109189","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109189 — A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the f…","description":"A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/api/dataimport/Swagger3ParserApiDefinition.java of the component Swagger3 Parser. Performing a manipulation of the argumen…","indicators":{"cves":["CVE-2026-109189"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:17:13.480Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109189","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979788","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416896","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416896/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979788","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109190","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109190 — A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiT…","description":"A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API Tool Configuration. The manipulation of the argument specUrl leads to server-side request forgery. The attack is possible to be ca…","indicators":{"cves":["CVE-2026-109190"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:17:13.640Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109190","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979789","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416898","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416898/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109402","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109402 — A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.lis…","description":"A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService.java of the component MCP Service. Performing a manipulation of the argument mcpServer results in server-side request f…","indicators":{"cves":["CVE-2026-109402"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:17:13.807Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109402","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979790","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416944","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416944/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89279","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89279 — Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encrypti…","description":"Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing.\n\nThis issue affects authtake: from v1.3 before v1.4.","indicators":{"cves":["CVE-2026-89279"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:17:15.010Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1310","label":"iletisim@usom.gov.tr","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94410","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94410 — A low privileged remote attacker is able to view a list of roles that should only be accessible to a…","description":"A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.","indicators":{"cves":["CVE-2026-94410"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:17:15.130Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://www.certvde.com/en/advisories/VDE-2026-109/","label":"info@cert.vde.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109404","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109404 — A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue…","description":"A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is pos…","indicators":{"cves":["CVE-2026-109404"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:18.947Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-109404","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979792","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416946","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416946/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979792","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109406","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109406 — A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the functi…","description":"A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possi…","indicators":{"cves":["CVE-2026-109406"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:19.313Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/macrozheng/mall/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/macrozheng/mall/issues/1002","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109406","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979830","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416948","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416948/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109706","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109706 — Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Fir…","description":"Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109706"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:20.690Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2053649","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109710","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109710 — Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox…","description":"Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109710"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:21.123Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068338","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109711","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109711 — Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Fir…","description":"Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109711"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:21.233Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068344","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109713","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109713 — Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefo…","description":"Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109713"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:21.433Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068421","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109714","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109714 — Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 a…","description":"Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109714"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:21.537Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2069765","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109717","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109717 — Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158,…","description":"Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109717"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.173Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2073647","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109718","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109718 — Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43…","description":"Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109718"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.280Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2073692","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109719","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109719 — Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed…","description":"Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109719"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.377Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2073969","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109721","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109721 — Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed…","description":"Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109721"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.590Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074161","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109723","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109723 — Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 15…","description":"Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109723"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.800Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074171","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109724","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109724 — Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firef…","description":"Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109724","CVE-2026-109725"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:22.907Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074193","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074208","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109726","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109726 — Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43…","description":"Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109726"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.113Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074212","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109727","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109727 — Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ES…","description":"Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109727"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.220Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074213","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109728","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109728 — Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox…","description":"Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109728"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.320Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074625","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109729","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109729 — Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158,…","description":"Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109729"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.430Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074632","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109731","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109731 — Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in F…","description":"Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109731"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.633Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2075436","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109732","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109732 — Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox E…","description":"Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109732"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:23.733Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2075998","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-107/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109735","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109735 — Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thun…","description":"Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109735"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.053Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2028727","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109738","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109738 — Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158,…","description":"Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109738"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.370Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2047722","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109741","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109741 — Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox…","description":"Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109741"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.693Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2058651","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109742","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109742 — Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Fir…","description":"Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109742"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:24.923Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2058800","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109748","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109748 — Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158…","description":"Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109748","CVE-2026-109749","CVE-2026-109761"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.677Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2067169","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2067174","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2071764","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109751","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109751 — Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Fir…","description":"Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109751","CVE-2026-109767"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:25.997Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068372","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2074963","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109752","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109752 — Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox E…","description":"Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109752"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:26.100Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068407","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109765","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109765 — Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Fire…","description":"Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109765"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:27.360Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2073396","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109768","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109768 — Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thu…","description":"Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:27.663Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2011368","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109769","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109769 — Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 1…","description":"Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109769"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:27.773Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2050313","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109770","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109770 — Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefo…","description":"Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109770"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:27.887Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2059230","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109771","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109771 — Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox…","description":"Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:27.990Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2059658","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109773","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109773 — Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird…","description":"Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109773"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.197Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2066094","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109775","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109775 — Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR…","description":"Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109775"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.403Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2068255","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109776","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109776 — Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.…","description":"Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109776"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.507Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2069395","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109777","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109777 — Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox…","description":"Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.613Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2069638","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109779","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109779 — Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thu…","description":"Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109779"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.817Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2072048","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109781","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109781 — Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Fi…","description":"Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109781"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:29.020Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2072852","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109833","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109833 — A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read…","description":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reach a…","indicators":{"cves":["CVE-2026-109833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:29.430Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109833","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550367","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109976","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109976 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes wh…","description":"A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk decrypti…","indicators":{"cves":["CVE-2026-109976"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:29.563Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109976","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550375","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550375","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65131","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-65131 — NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the…","description":"NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.","indicators":{"cves":["CVE-2026-65131"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:31.947Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5890","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65131","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-65131","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-67456","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-67456 — NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A s…","description":"NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.","indicators":{"cves":["CVE-2026-67456"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:33.793Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/NVIDIA/product-security/tree/main/2026/5901","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67456","label":"psirt@nvidia.com","domainType":"primary"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-67456","label":"psirt@nvidia.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109409","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109409 — A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function chi…","description":"A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The atta…","indicators":{"cves":["CVE-2026-109409"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:25.673Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://drive.google.com/drive/folders/19JuQt4385UFpRyLXglv80V0uxZujxUE9?usp=drive_link","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/HBAI-Ltd/Toonflow-app/releases/tag/v2.0.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109409","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/982704","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416951","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416951/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109677","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109677 — FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_Loc…","description":"FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to d…","indicators":{"cves":["CVE-2026-109677"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:30.897Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/commit/ececc5cbd0646ef012ca178322e6ef922a11f0c1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8m97-wwx3-r8vj","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.0.0-beta1-before-3.28.0-out-of-bounds-read-via-locatecardsbyatra-handler","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109678","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109678 — FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emul…","description":"FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes a NULL reader-name destination to scard_copy_strings. A malicious RDP server can send an SCardStatusA request with fmszReaderNamesIsN…","indicators":{"cves":["CVE-2026-109678"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:31.053Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-996j-34w6-5hgm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-beta1-before-3.32.0-reachable-assertion-via-emulated-scardstatusa","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-996j-34w6-5hgm","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109679","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109679 — FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when…","description":"FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client.","indicators":{"cves":["CVE-2026-109679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:31.220Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qjwp-c855-hc69","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-beta4-before-3.32.0-null-pointer-crash-via-arm-response","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qjwp-c855-hc69","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109680","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109680 — FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line,…","description":"FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to 32 bytes while keeping a pre-filled suggested username's length as its write offset. A malicious or compromised ARM routing service can return a long redirectedUsername th…","indicators":{"cves":["CVE-2026-109680"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:31.367Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4ww8-3vqm-jgcf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.18.0-before-3.32.0-heap-out-of-bounds-write-via-arm-redirected-username","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4ww8-3vqm-jgcf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109938","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109938 — Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP…","description":"Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirection enabled.","indicators":{"cves":["CVE-2026-109938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:31.617Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-96rv-gf42-7wq9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.11.0-before-3.32.0-integer-overflow-via-mapped-video-geometry-update","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-96rv-gf42-7wq9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109939","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109939 — FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_orde…","description":"FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3_DO_NOT_CACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or compro…","indicators":{"cves":["CVE-2026-109939"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:31.767Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cq4m-gwc5-w8rc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.27.1-before-3.32.0-null-pointer-dereference-via-cache-bitmap-v3-order","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109940","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109940 — FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overf…","description":"FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider. It hex-encodes a key's CKA_ID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS#11 tok…","indicators":{"cves":["CVE-2026-109940"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:31.910Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g8jw-gv54-r94p","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-beta1-before-3.32.0-stack-buffer-overflow-via-pkcs-11-key-name","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g8jw-gv54-r94p","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109941","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109941 — FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that…","description":"FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads t…","indicators":{"cves":["CVE-2026-109941"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:32.073Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7vfc-chg9-q5r8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.3.0-before-3.32.0-infinite-loop-via-rd-gateway-chunked-response","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7vfc-chg9-q5r8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109942","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109942 — FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/cor…","description":"FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c because rdg_process_control_packet accepts a header-only PKT_TYPE_CLOSE_CHANNEL packet and passes the null payload without a check. A malicious or compromised RD Gateway can send an ei…","indicators":{"cves":["CVE-2026-109942"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:32.220Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f46f-pxh9-w2rh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.3.0-before-3.32.0-null-pointer-dereference-via-rd-gateway-close-channel-packet","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f46f-pxh9-w2rh","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109943","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109943 — FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, whic…","description":"FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPoints is zero, so both the queue consumer and parser cleanup free it. A malicious RDP server can send a point-bearing pol…","indicators":{"cves":["CVE-2026-109943"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:32.377Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pg3f-chj4-mrw6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.29.0-before-3.32.0-double-free-via-async-update-polygon-order","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109944","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109944 — FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a…","description":"FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation context, so Emulate_SCardTransmit later looks up the deleted parent context and reaches a terminating WINPR_ASSERT. A malicious RDP server can crash a connecting client with smart…","indicators":{"cves":["CVE-2026-109944"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:32.523Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f526-rq4j-5ch8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-reachable-assertion-via-stale-smartcard-handle","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109945","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109945 — FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when…","description":"FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrently on one card handle. A malicious RDP server can overlap these IRPs through separate context workers to free and reuse the SCardHand…","indicators":{"cves":["CVE-2026-109945"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:32.670Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rpr-jjjg-5qv6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-smartcard-use-after-free-via-concurrent-disconnect-and-transmit","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rpr-jjjg-5qv6","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109946","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109946 — FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even befor…","description":"FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an assertion and aborts the client. A malicious or compromised RDP server can terminate a connected FreeRDP client after RDPGFX AVC444 negotiation by sendi…","indicators":{"cves":["CVE-2026-109946"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:32.820Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-97pf-pwp3-2wrv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.11.0-before-3.32.0-reachable-assertion-via-avc444-odd-region-width","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-97pf-pwp3-2wrv","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109947","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109947 — FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that al…","description":"FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRP_MJ_READ with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on…","indicators":{"cves":["CVE-2026-109947"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:32.993Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q56j-jjh6-38jf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.20.1-before-3.32.0-unbounded-allocation-via-drive-process-irp-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q56j-jjh6-38jf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109948","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109948 — FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartc…","description":"FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing smartcard_pack_transm…","indicators":{"cves":["CVE-2026-109948"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:33.260Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f554-v4xw-5j39","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-memory-disclosure-via-scardtransmit-smartcard-redirection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f554-v4xw-5j39","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109949","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109949 — FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in…","description":"FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartcard GIDS implementation, which stores the PIN retry counter per-handle. A malicious RDP server can exhaust the counter with VERIFY APDUs, then request a new SCardConnect to reset at…","indicators":{"cves":["CVE-2026-109949"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:33.410Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-chh2-527f-x255","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-pin-brute-force-via-virtual-smartcard","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109950","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109950 — FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a mali…","description":"FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger than the NDR string ActualCount in consent or service messages, c…","indicators":{"cves":["CVE-2026-109950"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:33.563Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xf45-j844-588v","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-heap-out-of-bounds-read-via-rd-gateway-messages","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xf45-j844-588v","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109951","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109951 — FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCre…","description":"FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATE_REQUEST_PDU whose channel name lacks a NUL…","indicators":{"cves":["CVE-2026-109951"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:33.723Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g4wg-67xq-8q53","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.17.1-before-3.32.0-heap-buffer-over-read-via-proxy-drdynvc-channel-name","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-g4wg-67xq-8q53","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109952","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109952 — The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_…","description":"The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set in nego_process_negotiation_response(), allowing a security protocol downgrade. A malicious server or man-in-the-middle can select RDSTLS to override /sec:nl…","indicators":{"cves":["CVE-2026-109952"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:33.877Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qq23-mqmv-pc65","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-security-protocol-downgrade-via-negotiation-response","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qq23-mqmv-pc65","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109953","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109953 — FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the…","description":"FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential delegation, sending the cleartext password to the RDP server. A compromised or man-in-the-middle destination host can decode TSPasswordCr…","indicators":{"cves":["CVE-2026-109953"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:34.030Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhxw-3hj9-9hqh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-cleartext-credential-disclosure-via-restricted-admin","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jhxw-3hj9-9hqh","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109954","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109954 — Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state ac…","description":"Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request interfere with other clients' database writes. On PostgreSQL or MongoDB replica sets and sharded clusters, other clients' ack…","indicators":{"cves":["CVE-2026-109954"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:34.190Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/parse-community/parse-server/security/advisories/GHSA-jhh9-hrgh-c9gv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/parse-server-9.0.0-before-9.10.2-alpha.5-transactional-batch-request-write-interference","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109955","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109955 — Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allow…","description":"Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated attackers to skip prefix middleware by exploiting double path decoding. Attackers can send malformed percent-encoded paths that the router matches in encoded form, reaching static fi…","indicators":{"cves":["CVE-2026-109955"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:34.340Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/honojs/hono/security/advisories/GHSA-5r4p-p66f-jhc7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/hono-4.12.4-before-4.13.11-middleware-bypass-via-servestatic-double-decoding","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109957","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109957 — EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authent…","description":"EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supplying a foreign attachmentId to the Import endpoint. Attackers can create an Import record referencing a known attachment…","indicators":{"cves":["CVE-2026-109957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:34.673Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-5729-xq64-4h22","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/espocrm-before-10.0.7-idor-via-import-attachmentid-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109958","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109958 — EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authentica…","description":"EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read restricted emailAddress values via the address-book search API. Users with record access can query address-book search to obtain email addresses even when Roles restrict the emailAdd…","indicators":{"cves":["CVE-2026-109958"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:34.850Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-2cr7-9g4f-8723","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/espocrm-4.0.0-before-10.0.7-field-level-access-bypass-via-address-book-search","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109959","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109959 — EspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability that allows authenticated users…","description":"EspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability that allows authenticated users to read audited field values restricted by field-level security by fetching individual stream notes. Users with stream access to a parent record can request GET /Note/{id}, which skips the NoteAccess…","indicators":{"cves":["CVE-2026-109959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:35.020Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-mr36-xx82-qf6h","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/espocrm-4.0.0-before-10.0.7-field-level-security-bypass-via-note-read-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109962","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109962 — Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller acc…","description":"Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and cronjob configuration via API read commands. Resellers can call MysqlServer.listing, MysqlServer.get, or Cronjobs.listing through api.php to obtain manag…","indicators":{"cves":["CVE-2026-109962"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:35.583Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-mx7x-72gh-8j8f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/froxlor-0.10.0-before-2.3.14-missing-authorization-in-mysqlserver-and-cronjobs-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-mx7x-72gh-8j8f","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109963","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109963 — Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email templa…","description":"Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor (admin_templates.php) because the mail body is fetched by mailbodyid without an adminid ownership check. Authenticated reseller admins can pair their own subjectid with sequential foreign ma…","indicators":{"cves":["CVE-2026-109963"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:35.747Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-646m-cj89-hm32","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/froxlor-before-2.3.14-idor-in-email-template-editor-via-admin-templates-php","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-646m-cj89-hm32","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109964","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109964 — ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeI…","description":"ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and w…","indicators":{"cves":["CVE-2026-109964"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:35.907Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/ImageMagick/ImageMagick","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ImageMagick/ImageMagick/blob/7.1.2-32/coders/pict.c#L503-L540","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ImageMagick/ImageMagick/commit/63dde0cf281383ab69432b88305f7dcd6a8ce900","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ImageMagick/ImageMagick6/commit/c18c5d5fb7f1d87ddbe0a02e9d1207c89b24588c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-and-6.9.13-58-heap-buffer-underwrite-in-pict-decoder","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109966","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109966 — yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated…","description":"yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated remote attackers to inject yt-dlp options by supplying a dash-prefixed url parameter to the Service.Formats JSON-RPC method. Attackers can send values like --load-info-json via /rpc/http or /rpc/ws t…","indicators":{"cves":["CVE-2026-109966"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:36.217Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/marcopiovanello/yt-dlp-web-ui","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/marcopiovanello/yt-dlp-web-ui/blob/v4.0.0/server/formats/parser.go","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vazzzy071-crypto/security-advisories/blob/main/advisories/2026-10-marcopiovanello-yt-dlp-web-ui-rpc-arg-injection.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/yt-dlp-web-ui-through-4.0.0-argument-injection-via-service-formats-json-rpc-method","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74030","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74030 — Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2j…","description":"Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy to exhaust agent memory. Attackers controlling the manager can push a small SCA policy with nested aliases via merged.mg to OOM-kill wazuh-modulesd on…","indicators":{"cves":["CVE-2026-74030"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:39.470Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-x8v7-g49q-ff7j","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-3.9.0-before-4.14.8-memory-exhaustion-via-sca-yaml-alias-expansion","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74031","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74031 — Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and d…","description":"Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows malicious cluster workers to delete arbitrary files via an unvalidated filename parameter. Attackers holding the cluster key can invoke these helpers through Dis…","indicators":{"cves":["CVE-2026-74031"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:39.633Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-w4qc-m4j4-6m9c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.1.1-before-4.14.8-path-traversal-file-deletion-via-rule-decoder-delete-helpers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-w4qc-m4j4-6m9c","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74032","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74032 — Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privil…","description":"Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions and /security/resources, which omit the caller's RBAC policies…","indicators":{"cves":["CVE-2026-74032"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:39.793Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-vh8p-3xvw-w536","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.0.0-before-4.14.8-rbac-authorization-bypass-via-security-actions","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-vh8p-3xvw-w536","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74033","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74033 — Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete…","description":"Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB list handlers that allows compromised cluster workers to read or delete master files. Attackers can send traversal or absolute-path filenames through the internal cluster RPC path, by…","indicators":{"cves":["CVE-2026-74033"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:39.943Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-vc33-wcqf-cwgv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-from-4.1.1-before-4.14.8-path-traversal-in-cdb-list-cluster-handlers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-vc33-wcqf-cwgv","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-74047","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74047 — Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-priv…","description":"Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth co…","indicators":{"cves":["CVE-2026-74047"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:41.317Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-qj8j-r988-54rx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.0.0-before-4.14.8-authd-pass-disclosure-via-agent-000-config-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-qj8j-r988-54rx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77361","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77361 — obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1…","description":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied fold…","indicators":{"cves":["CVE-2026-77361","CVE-2026-77362"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:42.343Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/The-40-Thieves/obsidian-tc/commit/c81d1687e2cfec98a0d8bc5038c029f41ea9c920","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/The-40-Thieves/obsidian-tc/pull/76","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.3.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-c5xx-h28h-f682","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/The-40-Thieves/obsidian-tc/commit/5ab2109274acf0070601fa71a62b14ddc9652309","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/The-40-Thieves/obsidian-tc/pull/75","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-43r2-c7g8-prc8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93346","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93346 — Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthe…","description":"Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass max_login_attempts by sending concurrent requests. Attackers can fire concurrent login bursts to the authenticate and run_as endpoints, each passing the block check before…","indicators":{"cves":["CVE-2026-93346"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:44.723Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-crrg-5qvw-8wjx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.0.0-before-4.14.8-api-brute-force-protection-bypass-via-race-condition","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-crrg-5qvw-8wjx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93347","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93347 — Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper t…","description":"Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read client…","indicators":{"cves":["CVE-2026-93347"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:44.890Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/wazuh/wazuh/releases/tag/v4.14.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-xrjw-cqrv-j92g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/wazuh-4.1.1-before-4.14.8-path-traversal-via-cluster-get-list-file","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wazuh/wazuh/security/advisories/GHSA-xrjw-cqrv-j92g","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102342","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102342 — ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.…","description":"ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that allow the SVG animate or set elements can retain an animation whose attributeName targets href and whose value uses the javascript scheme. The sanitized SVG can therefore create a…","indicators":{"cves":["CVE-2026-102342"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:30.177Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/rust-ammonia/ammonia/commit/9394bd81179e756cb911314deabd943f1a9c8989","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/commit/9e3335e2dd8ab07346ff7997f20662a3da4023f6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/commit/d2ae1547f478bd84d158bc5e57f5d31437dc4d8d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/pull/250","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/pull/251","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/pull/252","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/releases/tag/v3.3.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/releases/tag/v4.0.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/releases/tag/v4.1.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/security/advisories/GHSA-m6mh-2hw2-555x","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103028","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103028 — SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authentica…","description":"SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_patterns or outside allowed_patterns to an allowed destination name because file-pattern filters are evaluated only on the destina…","indicators":{"cves":["CVE-2026-103028"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:30.653Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/drakkan/sftpgo/commit/dc8886bc079094b4ac2338df683f358b7676b5eb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/drakkan/sftpgo/releases/tag/v2.7.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/drakkan/sftpgo/security/advisories/GHSA-wwv9-g5x4-966q","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107917","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107917 — Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allow…","description":"Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simu…","indicators":{"cves":["CVE-2026-107917"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:31.787Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/r7300dst","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107918","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107918 — Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows…","description":"Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulat…","indicators":{"cves":["CVE-2026-107918"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:31.917Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/r7300dst","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11730","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11730 — Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network…","description":"Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.","indicators":{"cves":["CVE-2026-11730"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:43.340Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/ex3700","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/ex6120","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53711","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-53711 — MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, t…","description":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event hand…","indicators":{"cves":["CVE-2026-53711"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:45.030Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/IBM/mcp-context-forge/commit/acd16196158f9a393187551b21a2fc61650f2e3d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/IBM/mcp-context-forge/pull/337","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/IBM/mcp-context-forge/releases/tag/v0.3.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x6gc-rm5j-55mw","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x6gc-rm5j-55mw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-65199","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-65199 — openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authentic…","description":"openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privilege` returns the complete nine-privilege…","indicators":{"cves":["CVE-2026-65199"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:46.947Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.runzero.com/advisories/huawei-openUBMC-snmp-privsec-cve-2026-65199","label":"44488dab-36db-4358-99f9-bc116477f914","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77375","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77375 — SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH…","description":"SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or i…","indicators":{"cves":["CVE-2026-77375"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:49.890Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/drakkan/sftpgo/commit/4f751232d7025cf2f7360e01ee8dca81e74b48b0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/drakkan/sftpgo/releases/tag/v2.7.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/drakkan/sftpgo/security/advisories/GHSA-q7pc-356p-hggc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-9218","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-9218 — Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR model…","description":"Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integ…","indicators":{"cves":["CVE-2026-9218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:52.447Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/cbr40/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/r7000/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/r7000p/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"},{"url":"https://www.netgear.com/support/product/rax40/","label":"a2826606-91e7-4eb6-899e-8484bd4575d5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102672","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102672 — Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C…","description":"Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The helpe…","indicators":{"cves":["CVE-2026-102672"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:09.343Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/electron/electron/commit/01faabfc250801a980fc94d64608046c67fc1cd9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/commit/15e2928a5c5f01759107b414010e220d90d59cef","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/commit/a0f9ff4cc0340545008424232d49caadd9c0c767","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/commit/b8f25c4cedb2e0f5f475912b709aba19c57c26be","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/pull/50745","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/releases/tag/v39.8.10","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/releases/tag/v41.10.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/releases/tag/v42.0.0-beta.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/electron/electron/security/advisories/GHSA-vv43-5jgx-7qv8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102734","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102734 — asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in astev…","description":"asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects, wh…","indicators":{"cves":["CVE-2026-102734"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:09.820Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/lmfit/asteval/commit/a3e56e7f8ed567a4817684d94213b290359077b4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/lmfit/asteval/pull/153","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/lmfit/asteval/releases/tag/1.0.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/lmfit/asteval/security/advisories/GHSA-9w56-46f6-3qhx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102832","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102832 — JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jup…","description":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewer:trust and notebook:trust command-link handlers use tracker.currentWidget to resolve the current Markdown viewer or not…","indicators":{"cves":["CVE-2026-102832"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:09.970Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/jupyterlab/jupyterlab/commit/0fc18ab4ef67e431a8f6560e387193baf786c70a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jupyterlab/jupyterlab/commit/b64bc88b8ca034cf158604a5cc48ca9170ea453b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jupyterlab/jupyterlab/commit/f7e5f9803fdf2aaaa0e9bfb9cc73386a8cc5f0b2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.11","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-jwrc-gm9j-263p","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102981","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102981 — Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow…","description":"Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET requests to api/workspaces/{slug}/invitations/{pk}/join/ through WorkspaceJoinEndpoint, whose WorkSpaceMemberInviteSerializer exposes the secret invitation token directly and thro…","indicators":{"cves":["CVE-2026-102981"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:10.120Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/makeplane/plane/commit/6220ba990b2276a1a1979d1d5df68f650b8b47ad","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/pull/9297","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/releases/tag/v1.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-gf48-p6jp-cwc4","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102988","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102988 — Plane is an open-source project management tool. Prior to 1.4.0, multiple issue-listing endpoints, i…","description":"Plane is an open-source project management tool. Prior to 1.4.0, multiple issue-listing endpoints, including unauthenticated public deploy boards handled by IssueListSpaceEndpoint in apps/api/plane/space/views/issue.py, pass the user-controlled order_by parameter through order_issue_queryset in apps…","indicators":{"cves":["CVE-2026-102988"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:10.440Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/makeplane/plane/commit/cc3eb974f1142146ddfedf7126cd4dfd376d32d1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/pull/9292","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/releases/tag/v1.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-2r95-c453-vxmr","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-2r95-c453-vxmr","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103965","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103965 — An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled i…","description":"An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.","indicators":{"cves":["CVE-2026-103965"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:10.790Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://jira.mongodb.org/browse/SERVER-134618","label":"cna@mongodb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104004","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104004 — MongoDB Server's collection validation feature may not properly handle certain expressions stored in…","description":"MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.","indicators":{"cves":["CVE-2026-104004"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:10.930Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://jira.mongodb.org/browse/SERVER-131412","label":"cna@mongodb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104005","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104005 — A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticate…","description":"A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization c…","indicators":{"cves":["CVE-2026-104005","CVE-2026-96299"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:11.137Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://jira.mongodb.org/browse/SERVER-131411","label":"cna@mongodb.com","domainType":"other"},{"url":"https://jira.mongodb.org/browse/SERVER-130431","label":"cna@mongodb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105460","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105460 — A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor…","description":"A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to read…","indicators":{"cves":["CVE-2026-105460"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:11.870Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-105460","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2545923","label":"secalert@redhat.com","domainType":"other"},{"url":"https://redhat.atlassian.net/browse/PSIRTSUPT-24932","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109524","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109524 — A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca…","description":"A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this issue is some unknown functionality of the file Admin/showdoctor.php of the component Admin Display Pages. This manipulation causes missing authorization.…","indicators":{"cves":["CVE-2026-109524"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:17.847Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/girishsaraf/Online-Appointment-Booking-System/issues/14","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109524","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984342","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417188","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417188/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-49264","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-49264 — OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4…","description":"OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocation.py reflects an unvalidated callback request parameter into success and error response bodies when enable_jsonp=True.…","indicators":{"cves":["CVE-2026-49264"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:20.560Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/oauthlib/oauthlib/commit/c888359f3c42bec235b2c5caab2069c9ed62457c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/oauthlib/oauthlib/pull/951","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/oauthlib/oauthlib/security/advisories/GHSA-hj66-6f7g-4r5v","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/oauthlib/oauthlib/security/advisories/GHSA-hj66-6f7g-4r5v","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-49265","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-49265 — OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4…","description":"OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/grant_types/authorization_code.py compare attacker-supplied code_verifier values with stored challenges using ordinary string equality in code_c…","indicators":{"cves":["CVE-2026-49265"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:20.713Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/oauthlib/oauthlib/pull/963","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/oauthlib/oauthlib/security/advisories/GHSA-xpv3-w29h-x7cv","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/oauthlib/PYSEC-2026-4114.yaml","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-79607","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79607 — During Xenstore live update the state record for a Xenstore watch with specified watch depth is writ…","description":"During Xenstore live update the state record for a Xenstore watch with\nspecified watch depth is written with two bytes missing.  This results\nin an inconsistent state when reading the state back in the new Xenstore,\ncausing a crash of Xenstore or wrong Xenstore data.","indicators":{"cves":["CVE-2026-79607"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:22.937Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-514.html","label":"security@xen.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/13/3","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"http://xenbits.xen.org/xsa/advisory-514.html","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-81507","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-81507 — ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.…","description":"ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuration-option processing in l2c_main.c and l2c_utils.c does not consistently validate option lengths against the remaining received packet bytes.…","indicators":{"cves":["CVE-2026-81507"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:23.447Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/espressif/esp-idf/commit/14c99559b4337cabcf0f09c21d16b93c4cd7a6fe","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/commit/1e07f6d83ca892630a7210df2958455f7ca77b4a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/commit/5731c63ece128f156939b9f734256e2227c1442a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/commit/8de265dc44b1b22c749ea44ee7c609b3da4162f0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/commit/9a6d04f65e0e341e7d72bd417c9f31b8a04ce846","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/commit/c2610255a5adce651ca582bb82368c3dd0ee2834","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/commit/c8cd8f4f3019ae2f912c8cbe9974445e8d9b8749","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/releases/tag/v5.2.8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/releases/tag/v5.3.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/releases/tag/v5.5.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/releases/tag/v6.0.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/releases/tag/v6.1-rc1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espressif/esp-idf/security/advisories/GHSA-v335-fxwc-rc44","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96297","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96297 — Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data f…","description":"Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory can b…","indicators":{"cves":["CVE-2026-96297"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:24.180Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://jira.mongodb.org/browse/SERVER-132946","label":"cna@mongodb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104126","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104126 — JumpServer is an open source bastion host and an operation and maintenance security audit system. Pr…","description":"JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation tasks.…","indicators":{"cves":["CVE-2026-104126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:15.747Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/jumpserver/jumpserver/commit/cc57ba0de5f6015746fae11cfc62402b11618e59","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/pull/16886","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/releases/tag/v4.10.17","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/security/advisories/GHSA-gr5x-5c4h-867g","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104250","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104250 — The unstructured library provides open-source components for ingesting and pre-processing images and…","description":"The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partition_html(html_parser_version=\"v2\") and the VLM partitioner can preserve untrusted document tags, attributes, text,…","indicators":{"cves":["CVE-2026-104250"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:15.900Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/Unstructured-IO/unstructured/commit/cda16b3f2170019be9c6ea5635946fb3eaa2d66f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Unstructured-IO/unstructured/pull/4394","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Unstructured-IO/unstructured/releases/tag/0.24.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Unstructured-IO/unstructured/security/advisories/GHSA-v5mq-3xhg-98m9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Unstructured-IO/unstructured/security/advisories/GHSA-v5mq-3xhg-98m9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106034","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106034 — A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticat…","description":"A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.","indicators":{"cves":["CVE-2026-106034"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:16.047Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs","label":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106035","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106035 — An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before versio…","description":"An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.","indicators":{"cves":["CVE-2026-106035"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:16.160Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs","label":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109827","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109827 — A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2t…","description":"A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the p…","indicators":{"cves":["CVE-2026-109827"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:31.697Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/gpac/gpac/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/gpac/gpac/commit/6d2c21a1a688abb20d0111b608db3b6f44d348f4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3930","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/gpac/gpac/pull/3932","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109827","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1001680","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417465","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417465/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.mediafire.com/file/zbpfhkgaf18cntf/poc_gpac_g1.zip/file","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109828","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109828 — A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchun…","description":"A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been…","indicators":{"cves":["CVE-2026-109828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:31.893Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/libsndfile/libsndfile/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/libsndfile/libsndfile/issues/1169","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109828","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1002209","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417466","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417466/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109890","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109890 — Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elem…","description":"Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through 4.11.110.","indicators":{"cves":["CVE-2026-109890"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:32.070Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/premium-addons-for-elementor/vulnerability/wordpress-premium-addons-for-elementor-plugin-4-11-110-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109896","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109896 — Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce downloa…","description":"Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Monitor integration for WooCommerce: from n/a through 1.0.3.","indicators":{"cves":["CVE-2026-109896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:32.193Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/download-monitor-integration-for-woocommerce/vulnerability/wordpress-download-monitor-integration-for-woocommerce-plugin-1-0-3-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109898","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109898 — Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiti…","description":"Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.","indicators":{"cves":["CVE-2026-109898","CVE-2026-110380"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:32.317Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-25-broken-access-control-vulnerability-3?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-wp-event-solution-plugin-4-1-26-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-10759","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-10759 — A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that con…","description":"A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifies the intended LDAP query and causes unin…","indicators":{"cves":["CVE-2026-10759"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:33.133Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgis-security-bulletin","label":"psirt@esri.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110098","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110098 — Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authentic…","description":"Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' requests by authorizing by operation name only. Attackers can supply numeric request ids to Leaves::edit(), Extra::edit(), Leaves::delete(), Ext…","indicators":{"cves":["CVE-2026-110098"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:33.410Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/jorani/jorani/blob/v1.0.2/application/controllers/Extra.php#L151-L168","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/blob/v1.0.2/application/controllers/Leaves.php#L276-L298","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/commit/59c403224401824489ec662934f71c90d27f614c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/issues/426","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/releases/tag/v1.0.4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/jorani-before-1.0.4-insecure-direct-object-reference-in-leave-and-overtime-requests","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110099","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110099 — Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeav…","description":"Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime and exportEmployees actions, allowing any authenticated user to export HR data. Attackers can request hr/exportEmployees or hr/exportLeaves/{id} and hr/exportOvertime/{id} to downlo…","indicators":{"cves":["CVE-2026-110099"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:33.553Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/jorani/jorani/blob/v1.0.2/application/controllers/Hr.php#L459-L500","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/commit/dee51fc3c6cb08b45fb2d03f3d44507bc07830e9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/issues/426","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/releases/tag/v1.0.4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/jorani-before-1.0.4-missing-authorization-in-hr-export-actions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110100","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110100 — Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allow…","description":"Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse get_headers()…","indicators":{"cves":["CVE-2026-110100"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:33.693Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/jorani/jorani/blob/v1.0.2/application/controllers/Contracts.php#L358-L375","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/commit/59c403224401824489ec662934f71c90d27f614c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/issues/426","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jorani/jorani/releases/tag/v1.0.4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/jorani-before-1.0.4-missing-authorization-and-ssrf-via-contracts-import","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110101","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110101 — Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authentic…","description":"Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restrictions. Attackers can upload HTML payloads via POST /api/data/{id}/file, served as text/html from public/uploads, executing…","indicators":{"cves":["CVE-2026-110101"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:33.830Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/benjaminjonard/koillection/blob/1.8.4/src/Entity/Datum.php#L141-L145","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/benjaminjonard/koillection/blob/1.8.4/src/Service/ImageHandler.php#L43-L50","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/benjaminjonard/koillection/issues/1609","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/benjaminjonard/koillection/releases/tag/1.8.4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/koillection-through-1.8.4-stored-xss-via-datum-file-attachment-uploads","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/benjaminjonard/koillection/issues/1609","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110103","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110103 — bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated…","description":"bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the multipart Content-Type in POST /api/upload. Attackers can upload script-bearing documents served inline from /res and send their URLs to administrator…","indicators":{"cves":["CVE-2026-110103"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:34.150Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/mlogclub/bbs-go/blob/v4.4.6/internal/handlers/api/upload_handlers.go#L36-L54","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mlogclub/bbs-go/blob/v4.4.6/internal/pkg/uploader/uploader.go#L90-L121","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mlogclub/bbs-go/commit/5bebf98bb9e0ac5162d4f8faf7a65fc0d496a362","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mlogclub/bbs-go/issues/305","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mlogclub/bbs-go/pull/306","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/bbs-go-through-4.4.6-stored-xss-via-image-upload-content-type","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110104","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110104 — Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to…","description":"Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register() stores unsalted MD5 digests in user_info.password. Attackers who obtain the password column through a database leak or backup exposure ca…","indicators":{"cves":["CVE-2026-110104"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:34.310Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/201206030/novel/blob/v3.5.0/src/main/java/io/github/xxyopen/novel/service/impl/UserServiceImpl.java#L70-L77","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/201206030/novel/commit/fa82ce7e426a5b29db469b8f13d2e29fc1260871","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/201206030/novel/pull/53","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/novel-through-3.5.0-unsalted-md5-password-storage","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/201206030/novel/pull/53","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110105","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110105 — B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthentica…","description":"B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to reach admin routes because PermissionMidware.check permits routes lacking permission.rule.url entries. Attackers can request /admin/report/ignore/{reportId}, /admin/tags/remove-unused…","indicators":{"cves":["CVE-2026-110105"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:34.463Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/88250/symphony","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/88250/symphony/blob/827a7dd8b74316aa62f370f893a8382a8b45ba0f/src/main/java/org/b3log/symphony/processor/AdminProcessor.java#L316-L386","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/88250/symphony/blob/827a7dd8b74316aa62f370f893a8382a8b45ba0f/src/main/java/org/b3log/symphony/processor/middleware/PermissionMidware.java#L94-L97","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/b3log-symphony-admin-endpoints-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/b3log-symphony-through-3.6.4-missing-authorization-in-admin-console-routes","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110106","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110106 — RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows…","description":"RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send DELETE /auth/unlock/{socialId} requests with a victim's binding id to remove their GitH…","indicators":{"cves":["CVE-2026-110106"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:34.613Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/dromara/RuoYi-Vue-Plus","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dromara/RuoYi-Vue-Plus/blob/7180b529776834fee912113b23f0bd7a387a8222/ruoyi-admin/src/main/java/org/dromara/web/controller/AuthController.java#L156-L162","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dromara/RuoYi-Vue-Plus/blob/7180b529776834fee912113b23f0bd7a387a8222/ruoyi-modules/ruoyi-system/src/main/java/org/dromara/system/service/impl/SysSocialServiceImpl.java#L116-L118","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ruoyi-vue-plus-social-unbind-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ruoyi-vue-plus-through-6.0.0-idor-via-delete-auth-unlock-socialid","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-110106-ruoyi-vue-plus-social-unbind-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110107","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110107 — RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allow…","description":"RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send DELETE /auth/unlock/{socialId}, which deletes sys_social rows by primary key without…","indicators":{"cves":["CVE-2026-110107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:34.780Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/dromara/RuoYi-Cloud-Plus","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dromara/RuoYi-Cloud-Plus/blob/27a79a10e25b120aa33799d0dd4c720d1c8cf631/ruoyi-auth/src/main/java/org/dromara/auth/controller/TokenController.java#L149-L153","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dromara/RuoYi-Cloud-Plus/blob/27a79a10e25b120aa33799d0dd4c720d1c8cf631/ruoyi-modules/ruoyi-system/src/main/java/org/dromara/system/service/impl/SysSocialServiceImpl.java#L111-L113","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ruoyi-cloud-plus-social-unbind-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ruoyi-cloud-plus-through-6.0.0-idor-via-delete-auth-unlock-socialid","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-110107-ruoyi-cloud-plus-social-unbind-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110109","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110109 — JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users w…","description":"JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST /device/transparent-codec/{productId}. Because the endpoint lacks @SaveAction, attackers can save arbitrary codec provid…","indicators":{"cves":["CVE-2026-110109","CVE-2026-110110"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:35.070Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/hs-web/hsweb-framework/blob/5.0.1/hsweb-authorization/hsweb-authorization-api/src/main/java/org/hswebframework/web/authorization/Authentication.java#L206-L218","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jetlinks/jetlinks-community","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jetlinks/jetlinks-community/blob/60ecc9f65d96acfd38da8daecdb0062fc72034f3/jetlinks-manager/device-manager/src/main/java/org/jetlinks/community/device/web/TransparentMessageCodecController.java#L138-L143","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/jetlinks-community-transparent-codec-save-authz-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/jetlinks-community-through-2.10.0-missing-authorization-via-product-level-transparent-codec-save","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/jetlinks/jetlinks-community/blob/60ecc9f65d96acfd38da8daecdb0062fc72034f3/jetlinks-manager/rule-engine-manager/src/main/java/org/jetlinks/community/rule/engine/web/AlarmConfigController.java#L63-L73","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/jetlinks-community-through-2.10.0-missing-authorization-via-alarm-enable-disable-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110113","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110113 — PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the Trad…","description":"PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController tradeAddress/save handler that allows authenticated members to modify other members' shipping addresses. Attackers can submit another member's sequential numeric address id to overw…","indicators":{"cves":["CVE-2026-110113"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:35.363Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/sanluan/PublicCMS/blob/V6.202608.a/publiccms-parent/publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java#L46-L62","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/publiccms-trade-address-save-cross-user-overwrite","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/publiccms-through-v6-202608-a-idor-via-tradeaddress-save-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/cve-2026-110113-publiccms-trade-address-save-cross-user-overwrite","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110114","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110114 — FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticat…","description":"FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared goo…","indicators":{"cves":["CVE-2026-110114"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:35.520Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/FJ-OMS/oms-erp/blob/14486c98280afd2e0372866f8f2345e2e2b32843/skyer-goods/src/main/java/org/skyer/goods/api/controller/v1/GoodsSkuController.java#L123-L131","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/FJ-OMS/oms-erp/blob/14486c98280afd2e0372866f8f2345e2e2b32843/skyer-goods/src/main/java/org/skyer/goods/api/controller/v1/SpuController.java#L104-L111","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/FJ-OMS/oms-erp/blob/14486c98280afd2e0372866f8f2345e2e2b32843/skyer-goods/src/main/java/org/skyer/goods/app/service/impl/SkuEsServiceImpl.java#L276-L301","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/oms-erp-es-test-unauth-index-wipe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/oms-erp-through-pre-missing-authentication-via-skyer-goods-es-test-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/oms-erp-es-test-unauth-index-wipe","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110117","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110117 — SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController t…","description":"SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated low-privileged employees to modify system-wide level-3 protection settings. Attackers can call the unannotated updateConfig and loginFail batchDelete endpoints to disable logi…","indicators":{"cves":["CVE-2026-110117"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:35.977Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/1024-lab/smart-admin/blob/v3.30.0/smart-admin-api-java17-springboot3/sa-admin/src/main/java/net/lab1024/sa/admin/interceptor/AdminInterceptor.java#L84-L96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/1024-lab/smart-admin/blob/v3.30.0/smart-admin-api-java17-springboot3/sa-admin/src/main/java/net/lab1024/sa/admin/module/system/support/AdminProtectController.java#L55-L65","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/smart-admin-level3-protect-config-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/smartadmin-through-3.30.0-missing-authorization-via-adminprotectcontroller","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110118","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110118 — WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authentica…","description":"WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/buttonOperation endpoints. Low-privileged attackers can supply a known taskId to the complete, completeTask or reAssign handlers…","indicators":{"cves":["CVE-2026-110118"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:36.130Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/risesoft-y9/WorkFlow-Engine/blob/v9.6.11/y9-module-flowableui/risenet-y9boot-support-flowableui/src/main/java/net/risesoft/controller/buttonOperation/ButtonOperationRestController.java#L1035-L1054","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risesoft-y9/WorkFlow-Engine/blob/v9.6.11/y9-module-flowableui/risenet-y9boot-support-flowableui/src/main/java/net/risesoft/controller/buttonOperation/ButtonOperationRestController.java#L216-L252","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risesoft-y9/WorkFlow-Engine/blob/v9.6.11/y9-module-processadmin/risenet-y9boot-support-processadmin/src/main/java/net/risesoft/service/impl/CustomTaskServiceImpl.java#L76-L79","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/workflow-engine-task-op-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/workflow-engine-through-9.6.11-missing-authorization-via-flowableui-buttonoperation-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110120","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110120 — Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sale…","description":"Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access other members' data by supplying their after-sales id and orderCode. Attackers can call deleteAfterSalesOrder, addLogisticsInformation, or GET /applyF…","indicators":{"cves":["CVE-2026-110120"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:36.417Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/guchengwuyue/yshopmall/blob/d1b20a2d76dfd98985410116db3aca8aca193b26/yshop-mall-boot/yshop-app/src/main/java/co/yixiang/sales/rest/StoreAfterSalesController.java#L151-L187","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/guchengwuyue/yshopmall/blob/d1b20a2d76dfd98985410116db3aca8aca193b26/yshop-mall-boot/yshop-mall/src/main/java/co/yixiang/modules/sales/service/impl/StoreAfterSalesServiceImpl.java#L353-L383","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/yshopmall-member-api-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/yshopmall-through-2.0.0-idor-via-after-sales-api-in-storeaftersalescontroller","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110121","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110121 — PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows…","description":"PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/{goodsId} to rep…","indicators":{"cves":["CVE-2026-110121","CVE-2026-110122"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:36.557Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/lilishop/lilishop/blob/v4.4/framework/src/main/java/cn/lili/modules/goods/serviceimpl/GoodsServiceImpl.java#L198-L222","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lilishop/lilishop/blob/v4.4/seller-api/src/main/java/cn/lili/controller/goods/GoodsStoreController.java#L143-L147","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/lilishop-seller-goods-cross-store-authz-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/pickmall-lilishop-through-4.4-idor-via-goods-edit-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/lilishop/lilishop/blob/v4.4/framework/src/main/java/cn/lili/modules/goods/serviceimpl/GoodsServiceImpl.java#L424-L442","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lilishop/lilishop/blob/v4.4/seller-api/src/main/java/cn/lili/controller/goods/GoodsStoreController.java#L177-L185","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/pickmall-lilishop-through-4.4-idor-via-goods-freight-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110125","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110125 — Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows a…","description":"Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying their order identifiers. Attackers can enumerate sequential order ids or serial numbers via detail, cancel, confirm, delete…","indicators":{"cves":["CVE-2026-110125"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:38.153Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-common/src/main/java/com/wayn/common/core/service/shop/impl/MobileOrderServiceImpl.java#L372-L473","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/OrderController.java#L41-L128","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/releases/tag/v2.0.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/waynboot-mall-mobile-member-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-idor-via-mobile-order-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110126","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110126 — waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressCon…","description":"waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE /address/{addressId…","indicators":{"cves":["CVE-2026-110126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:38.323Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/AddressController.java#L44-L67","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/commit/0ef8fa4a951fc1f6d57f3e12e37c31490e886a64","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/releases/tag/v2.0.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/waynboot-mall-mobile-member-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-idor-via-mobile-address-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110127","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110127 — waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile…","description":"waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE /cart/{cart…","indicators":{"cves":["CVE-2026-110127"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:38.483Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-common/src/main/java/com/wayn/common/core/service/shop/impl/CartServiceImpl.java#L151-L158","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/CartController.java#L75-L101","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/releases/tag/v2.0.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/waynboot-mall-mobile-member-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-idor-via-mobile-cart-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110129","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110129 — fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in t…","description":"fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated members read other members' refund records. Attackers can register freely and enumerate sequential refundId values to obtain bu…","indicators":{"cves":["CVE-2026-110129"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:38.797Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/fushengqian/fuintCatering/blob/122c9e61a1bc7d947428b7c4f8be4faa76f38e11/fuintBackend/fuint-application/src/main/java/com/fuint/common/service/impl/RefundServiceImpl.java#L330-L353","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/fushengqian/fuintCatering/blob/122c9e61a1bc7d947428b7c4f8be4faa76f38e11/fuintBackend/fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientRefundController.java#L123-L133","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/fuintcatering-client-refund-detail-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fuintcatering-through-commit-122c9e6-idor-via-clientapi-refund-detail","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/fuintcatering-client-refund-detail-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110131","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110131 — ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article an…","description":"ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or isDel=tr…","indicators":{"cves":["CVE-2026-110131"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:38.933Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/LiuYuYang01/ThriveX-Server/blob/4.0/blog/src/main/java/liuyuyang/net/web/controller/ArticleController.java#L82-L102","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LiuYuYang01/ThriveX-Server/blob/4.0/blog/src/main/java/liuyuyang/net/web/service/impl/ArticleServiceImpl.java#L228-L270","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LiuYuYang01/ThriveX-Server/blob/4.0/blog/src/main/java/liuyuyang/net/web/service/impl/ArticleServiceImpl.java#L318-L356","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LiuYuYang01/ThriveX-Server/releases/tag/4.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/thrivex-server-draft-article-unauth-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/thrivex-server-through-4.0-missing-authorization-via-article-retrieval-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19939","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19939 — The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whene…","description":"The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session->timeout_work before clearing the pending request, but bt_avdtp_l2cap_disc…","indicators":{"cves":["CVE-2026-19939"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:39.937Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/a10d18c3be9d1a968574dbfbce6baee58ea398e8","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9mww-f3h4-mq95","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-19940","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19940 — The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/class…","description":"The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps its struct bt_hfp_ag objects in a static pool indexed by ACL connection index. On link teardown, hfp_ag_disconnected() cancels ag->tx_work and the per-call work items and then clears…","indicators":{"cves":["CVE-2026-19940"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:40.107Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/204c36b896fe8d68ca3cb3d00216f245f91d14be","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-v47w-8959-rx62","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69226","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69226 — A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing…","description":"A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSignup=true). An attacker can bypass the intended restriction by manipulating the signup workflow, resulting in unauthorized ac…","indicators":{"cves":["CVE-2026-69226"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:45.010Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/september-2026-arcgis-security-bulletin","label":"psirt@esri.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85733","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85733 — FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian a…","description":"FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo(). A derived image that does not overwrite this placeholder serves the diagnostics page in production and can disc…","indicators":{"cves":["CVE-2026-85733"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:47.563Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/php/frankenphp/commit/17940ff2ee188a1e48aabd10c095df72b42539e0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/php/frankenphp/pull/2524","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/php/frankenphp/releases/tag/caddy/v1.12.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/php/frankenphp/security/advisories/GHSA-cj57-c655-p798","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88833","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88833 — A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client repla…","description":"A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causing a…","indicators":{"cves":["CVE-2026-88833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:48.007Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-88833","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531347","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88838","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88838 — A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions…","description":"A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are re-pa…","indicators":{"cves":["CVE-2026-88838"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:48.340Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-88838","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531352","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106170","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106170 — An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5…","description":"An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow  a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.","indicators":{"cves":["CVE-2026-106170"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:14.313Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-176","label":"psirt@fortinet.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106171","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106171 — A improper neutralization of special elements used in an os command ('os command injection') vulnera…","description":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets","indicators":{"cves":["CVE-2026-106171"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:14.443Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-177","label":"psirt@fortinet.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106172","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106172 — A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, Fo…","description":"A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to…","indicators":{"cves":["CVE-2026-106172"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:14.567Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-179","label":"psirt@fortinet.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-15577","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15577 — A user or service account with read-only access to Git Sync (provisioning) connections can modify a…","description":"A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On Grafana 12.4 the affected API is only available when the experimental provisioning feature toggle is enabled.","indicators":{"cves":["CVE-2026-15577"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:23.073Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-15577","label":"security@grafana.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-33374","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-33374 — The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing aut…","description":"The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the server through out-of-memory conditions.","indicators":{"cves":["CVE-2026-33374"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:23.720Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-33374","label":"security@grafana.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93294","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93294 — A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Re…","description":"A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.","indicators":{"cves":["CVE-2026-93294"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:26.663Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-93294","label":"security@grafana.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95502","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-95502 — A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memor…","description":"A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.","indicators":{"cves":["CVE-2026-95502"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:26.790Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://grafana.com/security/security-advisories/cve-2026-95502","label":"security@grafana.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102186","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102186 — Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclo…","description":"Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-102186"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:42.963Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102186","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102187","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102187 — Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio…","description":"Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-102187","CVE-2026-83925"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:43.150Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102187","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83925","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102188","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102188 — Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elev…","description":"Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-102188"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:43.337Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102188","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102198","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102198 — Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose info…","description":"Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-102198"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:44.677Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102198","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102199","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102199 — Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to d…","description":"Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-102199"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:44.863Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102199","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102206","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102206 — Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to…","description":"Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-102206"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:45.843Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102206","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102221","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102221 — No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat…","description":"No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-102221"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:47.943Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102221","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102851","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102851 — Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a secur…","description":"Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-102851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:49.427Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102851","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102865","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102865 — Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose inf…","description":"Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-102865"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:51.080Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102865","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102867","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102867 — Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information…","description":"Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-102867","CVE-2026-70206","CVE-2026-70263","CVE-2026-88169","CVE-2026-108434","CVE-2026-108436"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:51.360Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102867","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70206","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70263","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88169","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108434","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108436","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103560","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103560 — Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.","description":"Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-103560"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:52.390Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103560","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103567","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103567 — Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose inf…","description":"Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-103567"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:52.703Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103567","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103576","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103576 — Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS)…","description":"Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-103576","CVE-2026-83646"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:53.587Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103576","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83646","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103856","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103856 — Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of…","description":"Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103856","CVE-2026-103857"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:54.120Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://www.adobe.com/trust/security/products/framemaker/apsb26-172.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104343","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104343 — Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an app…","description":"Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in tha…","indicators":{"cves":["CVE-2026-104343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:55.167Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://www.adobe.com/trust/security/products/framemaker/apsb26-172.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105006","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105006 — Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a phys…","description":"Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-105006"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:56.707Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105006","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105713","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105713 — Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to p…","description":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.","indicators":{"cves":["CVE-2026-105713"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:59.090Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105713","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105719","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105719 — Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose i…","description":"Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-105719"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:59.887Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105719","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105726","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105726 — Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information local…","description":"Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-105726"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:00.640Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105726","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105731","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105731 — Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to discl…","description":"Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-105731"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:01.170Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105731","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107605","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107605 — SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Criti…","description":"SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.","indicators":{"cves":["CVE-2026-107605","CVE-2026-107606","CVE-2026-107607"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:01.927Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108127","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108127 — Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ…","description":"Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-108127","CVE-2026-108128","CVE-2026-108129","CVE-2026-97819","CVE-2026-97820","CVE-2026-97821","CVE-2026-97822","CVE-2026-97823","CVE-2026-97824","CVE-2026-97825","CVE-2026-97826","CVE-2026-97827","CVE-2026-97829","CVE-2026-97831","CVE-2026-97832","CVE-2026-97833","CVE-2026-97834","CVE-2026-97835","CVE-2026-97836","CVE-2026-97837","CVE-2026-97838","CVE-2026-97839","CVE-2026-97840","CVE-2026-97841","CVE-2026-97842","CVE-2026-97843","CVE-2026-97844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:02.510Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108127","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108128","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108129","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97819","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97820","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97821","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97822","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97823","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97824","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97825","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97826","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97827","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97829","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97831","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97832","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97833","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97834","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97835","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97836","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97837","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97838","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97839","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97840","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97841","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97842","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97843","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97844","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108462","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108462 — Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-108462","CVE-2026-70199","CVE-2026-70232"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:06.117Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108462","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70199","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70232","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108466","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108466 — Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.","description":"Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-108466"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:06.797Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108466","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110209","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110209 — Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows au…","description":"Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admin users to read stored secrets through unprotected ApiConfigController and SystemConfigController endpoints. Attackers can query the api-config get/list and system config endpoints…","indicators":{"cves":["CVE-2026-110209"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:44.740Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Stonewuu/ai-fusion-video/blob/v1.2.0/ai-fusion-video/src/main/java/com/stonewu/fusion/controller/ai/ApiConfigController.java#L81-L102","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Stonewuu/ai-fusion-video/blob/v1.2.0/ai-fusion-video/src/main/java/com/stonewu/fusion/controller/system/SystemConfigController.java#L26-L36","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ai-fusion-video-broken-access-control-and-upload-path-traversal","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ai-fusion-video-through-1.2.0-missing-authorization-in-configuration-read-endpoints-exposes-stored-credentials","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ai-fusion-video-broken-access-control-and-upload-path-traversal","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110210","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110210 — Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation…","description":"Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known secret identifier to retrieve encrypted sec…","indicators":{"cves":["CVE-2026-110210"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:44.887Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/phasehq/console","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/phasehq/console/blob/v2.77.3/backend/api/utils/access/permissions.py#L78-L92","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/phasehq/console/blob/v2.77.3/backend/backend/schema.py#L1022-L1052","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/phasehq/console/blob/v2.77.3/backend/backend/schema.py#L985-L1009","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SyZJ_mjize","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/phase-console-through-2.77.3-missing-authorization-via-secrethistory-graphql-query","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110212","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110212 — Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authentic…","description":"Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write uploaded files outside the media directory via the subDir parameter of POST /api/storage/upload. Attackers can supply parent-directory sequences that LocalStorageStrategy.storeByte…","indicators":{"cves":["CVE-2026-110212"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:45.187Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Stonewuu/ai-fusion-video/blob/v1.2.0/ai-fusion-video/src/main/java/com/stonewu/fusion/controller/storage/FileUploadController.java#L72-L99","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Stonewuu/ai-fusion-video/blob/v1.2.0/ai-fusion-video/src/main/java/com/stonewu/fusion/service/storage/strategy/LocalStorageStrategy.java#L77-L92","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ai-fusion-video-broken-access-control-and-upload-path-traversal","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ai-fusion-video-through-1.2.0-path-traversal-in-media-upload-subdir-parameter","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ai-fusion-video-broken-access-control-and-upload-path-traversal","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110213","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110213 — Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability th…","description":"Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' generation results by supplying arbitrary task ids. Attackers can enumerate auto-increment task ids on the image and video /items endpoints to obtain…","indicators":{"cves":["CVE-2026-110213"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:45.330Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Stonewuu/ai-fusion-video/blob/v1.2.0/ai-fusion-video/src/main/java/com/stonewu/fusion/controller/generation/ImageGenerationController.java#L50-L54","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Stonewuu/ai-fusion-video/blob/v1.2.0/ai-fusion-video/src/main/java/com/stonewu/fusion/controller/generation/VideoGenerationController.java#L49-L53","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ai-fusion-video-broken-access-control-and-upload-path-traversal","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ai-fusion-video-through-1.2.0-insecure-direct-object-reference-in-generation-task-item-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110217","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110217 — Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any au…","description":"Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retrieve other operators' BCrypt password hashes via GET /chat/hrs. Low-privileged operators can collect administrator password hashes, phone numbers, and addresses from the serial…","indicators":{"cves":["CVE-2026-110217"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:45.937Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/lenve/vhr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lenve/vhr/blob/03abbd35af24e55368ce4e09f4038dc2aba3ff5f/vhr/vhrserver/vhr-mapper/src/main/java/org/javaboy/vhr/mapper/HrMapper.xml#L26-L28","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lenve/vhr/blob/03abbd35af24e55368ce4e09f4038dc2aba3ff5f/vhr/vhrserver/vhr-model/src/main/java/org/javaboy/vhr/model/Hr.java#L138-L140","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lenve/vhr/blob/03abbd35af24e55368ce4e09f4038dc2aba3ff5f/vhr/vhrserver/vhr-web/src/main/java/org/javaboy/vhr/controller/ChatController.java#L12-L20","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/vhr-chat-hrs-password-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/vhr-through-commit-03abbd3-information-disclosure-of-operator-password-hashes-via-get-chat-hrs","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/vhr-chat-hrs-password-disclosure","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110219","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110219 — QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote att…","description":"QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject scripts through the price parameter of the back-office Additional Facilities form. Attackers can induce an authenticated back-office user to submit a crafted request whose unescaped p…","indicators":{"cves":["CVE-2026-110219"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:46.250Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Qloapps/QloApps","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/modules/hotelreservationsystem/controllers/admin/AdminRoomTypeGlobalDemand.php#L200-L232","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/modules/hotelreservationsystem/views/templates/admin/room_type_global_demand/helpers/form/form.tpl#L208-L209","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/pull/1809","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/SyMoELioMx","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/qloapps-through-1.7.0-reflected-xss-via-additional-facility-price-field","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110221","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110221 — QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeatu…","description":"QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeaturePricesSettings form that echoes feature_price_name and impact_value POST values unescaped after validation fails. Attackers can lure an authenticated back-office user into submitting a crafted reque…","indicators":{"cves":["CVE-2026-110221"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:46.563Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Qloapps/QloApps","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/modules/hotelreservationsystem/controllers/admin/AdminHotelFeaturePricesSettings.php#L401-L414","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/modules/hotelreservationsystem/views/templates/admin/hotel_feature_prices_settings/helpers/form/form.tpl#L185","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/modules/hotelreservationsystem/views/templates/admin/hotel_feature_prices_settings/helpers/form/form.tpl#L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/SyMoELioMx","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/qloapps-through-1.7.0-reflected-xss-via-advanced-price-rule-name-and-impact-value","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110222","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110222 — Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allo…","description":"Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC code to IFSC.find or IFSC#get. Attackers can submit network-path references or absolute URIs that URI.join resolves as a new host, sen…","indicators":{"cves":["CVE-2026-110222"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:46.723Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/razorpay/ifsc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/razorpay/ifsc/blob/v2.0.62/src/ruby/ifsc.rb#L53-L58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/rJYWKMsiMg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://rubygems.org/gems/ifsc","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/razorpay-ifsc-ruby-gem-through-2.0.62-ssrf-via-ifsc-lookup","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/rJYWKMsiMg","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110224","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110224 — QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfCont…","description":"QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave() that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing JavaScr…","indicators":{"cves":["CVE-2026-110224"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:47.023Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Qloapps/QloApps","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/admin/themes/default/template/alerts.tpl#L35-L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/controllers/admin/AdminSearchConfController.php#L328-L343","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/SyMoELioMx","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/qloapps-through-1.7.0-reflected-xss-via-search-alias-validation-errors","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@leediay/SyMoELioMx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110226","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110226 — QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted ba…","description":"QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned hotels by supplying an arbitrary id_hotel. Attackers can enumerate all hotels via the unfiltered room type form selector and post foreign hote…","indicators":{"cves":["CVE-2026-110226"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:47.390Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Qloapps/QloApps","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/controllers/admin/AdminProductsController.php#L2362-L2367","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/controllers/admin/AdminProductsController.php#L3038-L3052","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/modules/hotelreservationsystem/classes/HotelBranchInformation.php#L488-L496","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/commit/24ff5f5e6ba0c7a42c83ce8155b318c3ef8c915d","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/pull/1649","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/SyMoELioMx","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/qloapps-through-1.7.0-authorization-bypass-via-id-hotel-in-room-type-creation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110228","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110228 — wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows auth…","description":"wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket CSV or Shaarli import. Attackers can upload an HTML file with script but no anchor elements, leaving it at the predict…","indicators":{"cves":["CVE-2026-110228"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:47.553Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/wallabag/wallabag","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wallabag/wallabag/blob/74cbfd945bc316b5cf0308ba56e32fd2ed3443c0/app/config/wallabag.yml#L169-L177","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wallabag/wallabag/blob/74cbfd945bc316b5cf0308ba56e32fd2ed3443c0/src/Wallabag/ImportBundle/Controller/HtmlController.php#L28-L54","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wallabag/wallabag/blob/74cbfd945bc316b5cf0308ba56e32fd2ed3443c0/web/.htaccess#L50-L56","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/wallabag-pocket-html-failed-import-stored-xss","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wallabag-2.6.13-through-2.6.14-stored-xss-via-failed-html-import-upload","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/wallabag-pocket-html-failed-import-stored-xss","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110229","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110229 — QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that…","description":"QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund re…","indicators":{"cves":["CVE-2026-110229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:47.707Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Qloapps/QloApps","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/classes/order/OrderSlip.php#L273-L288","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/controllers/admin/AdminSlipController.php#L160-L229","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/blob/v1.7.0/controllers/admin/AdminSlipController.php#L33-L41","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/commit/a759ae96d0d01e982d40f96d357c94bb30f3a7b3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Qloapps/QloApps/pull/1650","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/SyMoELioMx","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/qloapps-through-1.7.0-missing-hotel-access-restriction-in-credit-slips","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110230","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110230 — XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated use…","description":"XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/{id}/vanity route. Attackers can supply sequential upload ids to MediaController::createVanity() to break existing share links and hij…","indicators":{"cves":["CVE-2026-110230"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:47.870Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/sergix44/xbackbone","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sergix44/xbackbone/blob/226af4f0cec218f563da6d53ececfa4708e6f3e7/app/Controllers/MediaController.php#L204-L229","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sergix44/xbackbone/commit/5e91a2a9859d20e41ee2e2403cfbe673804f6221","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sergix44/xbackbone/pull/671","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ByAj-Xoifl","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/xbackbone-through-3.8.2-missing-authorization-via-upload-vanity-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110231","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110231 — muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers…","description":"muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorized_keys that, when extracte…","indicators":{"cves":["CVE-2026-110231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:48.027Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/mucommander/mucommander/blob/3bc2118e13681a8018b84a06f1c5fea4a3f940f7/mucommander-commons-file/src/main/java/com/mucommander/commons/file/AbstractFile.java#L1021-L1023","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mucommander/mucommander/blob/3bc2118e13681a8018b84a06f1c5fea4a3f940f7/mucommander-core/src/main/java/com/mucommander/job/impl/UnpackJob.java#L233-L256","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mucommander/mucommander/blob/3bc2118e13681a8018b84a06f1c5fea4a3f940f7/mucommander-protocol-sftp/src/main/java/com/mucommander/commons/file/protocol/sftp/SFTPFile.java#L586-L622","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mucommander/mucommander/releases/tag/1.6.2-1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ryH-CfoiMl","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/mucommander-through-1.6.2-path-traversal-via-archive-extraction-to-ftp-sftp","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110234","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110234 — Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to ove…","description":"Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives trun…","indicators":{"cves":["CVE-2026-110234"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:48.480Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/elio-fm/elio/blob/e7daae44ce748310de441499576bdc31b936d54c/src/preview/archives/external_tools.rs#L30-L45","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/elio-fm/elio/blob/e7daae44ce748310de441499576bdc31b936d54c/src/preview/external_commands.rs#L14-L47","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/elio-fm/elio/blob/e7daae44ce748310de441499576bdc31b936d54c/src/preview/external_commands.rs#L92-L95","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/elio-fm/elio/releases/tag/v1.13.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/r1d_wQojfg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/elio-through-1.13.0-insecure-temporary-file-creation-in-external-preview-command-capture","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110235","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110235 — MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write file…","description":"MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting files…","indicators":{"cves":["CVE-2026-110235"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:48.627Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/AbdurazaaqMohammed/MP-Manager/blob/592107e4bbe9da26bf10b3e22b023696324fb99f/app/src/main/java/io/github/abdurazaaqmohammed/utils/ArchiveUtil.java#L134-L152","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AbdurazaaqMohammed/MP-Manager/blob/592107e4bbe9da26bf10b3e22b023696324fb99f/app/src/main/java/io/github/abdurazaaqmohammed/utils/ArchiveUtil.java#L226-L231","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AbdurazaaqMohammed/MP-Manager/releases/tag/1.1.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/S161BQjoMx","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/mp-manager-through-1.1.0-path-traversal-via-archive-extraction-sanitizeentryname-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/S161BQjoMx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110239","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110239 — Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-te…","description":"Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes wh…","indicators":{"cves":["CVE-2026-110239"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.210Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/zofe/rapyd-admin","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/blob/v9.19.0/resources/views/components/rich-text.blade.php#L50-L61","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/blob/v9.19.0/src/helpers.php#L11-L29","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/commit/acd6ee85f9e5ccec67199673b039c605d161406a","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zofe/rapyd-admin/releases/tag/v9.20.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/rapyd-admin-before-9.20.0-stored-xss-via-rich-text-component","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110240","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110240 — Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that m…","description":"Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal I…","indicators":{"cves":["CVE-2026-110240"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.350Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/duke-git/lancet","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/duke-git/lancet/blob/v1.4.6/netutil/net.go#L158-L170","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/duke-git/lancet/blob/v2.3.9/netutil/net.go#L192-L205","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/duke-git/lancet/commit/835111c832939a85416d686a1e99d5fe7060c9b4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/duke-git/lancet/issues/356","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/duke-git/lancet/pull/357","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/lancet-through-2.3.9-ssrf-protection-bypass-via-netutil-isinternalip","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/duke-git/lancet/issues/356","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110254","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110254 — Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory…","description":"Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses…","indicators":{"cves":["CVE-2026-110254"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.697Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-8rv7-48hx-jfw9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/dockhand-before-1.0.45-ssrf-via-ipv6-transition-address-bypass-in-ipcategory","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-54086","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-54086 — SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the IS…","description":"SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing an…","indicators":{"cves":["CVE-2026-54086"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:52.543Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/esa/sleapi-j/commit/265118dfb70d1d0d991b085dcde4028c60bce4fc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/esa/sleapi-j/releases/tag/5.1.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/esa/sleapi-j/security/advisories/GHSA-6g75-jwgj-hj8v","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-59116","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-59116 — Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized at…","description":"Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-59116"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:52.970Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59116","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-62879","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-62879 — Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to…","description":"Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-62879"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:53.537Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62879","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-66822","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-66822 — Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclos…","description":"Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-66822"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:53.693Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66822","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69506","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69506 — Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose informa…","description":"Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69506","CVE-2026-88140"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:55.520Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69506","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88140","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69640","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69640 — Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a…","description":"Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-69640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:56.867Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69640","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69644","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69644 — Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:57.030Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69644","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69675","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69675 — Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose informat…","description":"Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69675"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:57.683Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69675","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69721","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69721 — Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69721"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:58.127Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69721","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69877","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69877 — Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over…","description":"Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-69877"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:00.750Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69902","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69902 — Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.","description":"Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-69902"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:01.833Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69902","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69905","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69905 — Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform ta…","description":"Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-69905"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:02.007Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69905","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69914","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69914 — Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose info…","description":"Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:02.553Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69914","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69919","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69919 — Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose infor…","description":"Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69919"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:03.217Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69919","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69922","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69922 — Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information…","description":"Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-69922","CVE-2026-70214","CVE-2026-70219","CVE-2026-88151","CVE-2026-88153","CVE-2026-88154","CVE-2026-88172","CVE-2026-88175","CVE-2026-88184","CVE-2026-88190","CVE-2026-88192","CVE-2026-97014","CVE-2026-97760","CVE-2026-97779"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:03.337Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69922","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70214","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70219","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88151","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88153","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88154","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88172","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88175","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88184","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88190","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88192","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97014","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97760","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97779","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69940","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69940 — Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information…","description":"Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-69940","CVE-2026-69955"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:04.173Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69940","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69955","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69947","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69947 — Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code…","description":"Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.","indicators":{"cves":["CVE-2026-69947","CVE-2026-69958"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:04.730Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69947","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69958","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69954","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69954 — Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc…","description":"Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69954"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:05.720Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69954","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69967","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69967 — Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information l…","description":"Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69967"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:07.167Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69967","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69968","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69968 — Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering o…","description":"Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.","indicators":{"cves":["CVE-2026-69968"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:07.343Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69968","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69971","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69971 — Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose inf…","description":"Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69971"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:07.813Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69971","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69973","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69973 — Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive…","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.","indicators":{"cves":["CVE-2026-69973"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:07.930Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69973","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69974","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69974 — Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information l…","description":"Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69974"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:08.083Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69974","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69978","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69978 — Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.","description":"Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.","indicators":{"cves":["CVE-2026-69978"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:08.600Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69978","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69979","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69979 — Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attack…","description":"Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-69979"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:08.750Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69979","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69999","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-69999 — Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-69999"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:11.153Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69999","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70011","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70011 — Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose informat…","description":"Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70011"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:12.200Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70011","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70017","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70017 — Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows a…","description":"Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70017"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:13.060Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70017","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70025","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70025 — Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.","description":"Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70025"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:13.663Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70025","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70041","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70041 — Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information loca…","description":"Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70041"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:14.833Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70041","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70044","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70044 — Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose…","description":"Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70044"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:15.020Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70044","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70055","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70055 — Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70055"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:16.257Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70055","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70057","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70057 — Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized att…","description":"Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-70057"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:16.583Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70057","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70063","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70063 — Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70063"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:17.423Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70063","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70071","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70071 — Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perf…","description":"Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-70071"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:18.487Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70071","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70072","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70072 — Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attack…","description":"Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70072"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:18.710Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70072","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70074","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70074 — Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70074"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:18.900Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70074","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70075","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70075 — Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enc…","description":"Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-70075"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:19.050Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70075","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70077","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70077 — Use after free in Windows Kernel allows an authorized attacker to disclose information locally.","description":"Use after free in Windows Kernel allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70077"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:19.333Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70077","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70083","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70083 — Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.","description":"Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-70083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:19.793Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70083","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70084","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70084 — Improper access control in Windows Projected File System allows an authorized attacker to disclose i…","description":"Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:19.937Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70084","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70085","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70085 — Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","description":"Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-70085","CVE-2026-96926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:20.087Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70085","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96926","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70087","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70087 — Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature loc…","description":"Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-70087"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:20.380Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70087","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70090","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70090 — Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose informat…","description":"Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70090"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:20.703Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70090","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70116","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70116 — Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker…","description":"Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.","indicators":{"cves":["CVE-2026-70116"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:23.713Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70116","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70119","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70119 — Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.","description":"Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-70119"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:24.130Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70119","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70122","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70122 — Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an au…","description":"Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70122"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:24.413Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70122","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70128","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70128 — Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local…","description":"Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70128","CVE-2026-83875","CVE-2026-83884","CVE-2026-83887","CVE-2026-83892","CVE-2026-83898","CVE-2026-83904"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:25.060Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70128","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83875","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83884","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83887","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83892","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83898","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83904","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70135","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70135 — Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose informatio…","description":"Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70135"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:26.013Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70135","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70137","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70137 — Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to…","description":"Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70137"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:26.350Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70137","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70141","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70141 — Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose i…","description":"Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70141","CVE-2026-70173","CVE-2026-83686"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:27.053Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70141","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70173","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83686","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70148","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70148 — Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclo…","description":"Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70148"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:27.863Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70148","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70162","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70162 — A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly han…","description":"A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.\nA remote unauthenticated attacker could exploit this vulner…","indicators":{"cves":["CVE-2026-70162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:29.803Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70166","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70166 — Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.","description":"Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70166"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:30.393Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70166","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70170","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70170 — Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a…","description":"Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70170"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:31.000Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70170","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70194","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70194 — Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a securi…","description":"Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-70194"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:33.370Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70195","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70195 — Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis…","description":"Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70195"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:33.493Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70195","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70196","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70196 — Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service o…","description":"Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-70196"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:33.673Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70196","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70201","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70201 — Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.","description":"Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.","indicators":{"cves":["CVE-2026-70201"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:34.230Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70201","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70208","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70208 — Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally…","description":"Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70208"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:34.970Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70208","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70211","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70211 — Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose infor…","description":"Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70211","CVE-2026-70292","CVE-2026-70294","CVE-2026-70295"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:35.513Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70211","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70292","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70294","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70295","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70216","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70216 — Insufficient granularity of access control in Windows Mobile Device Management allows an authorized…","description":"Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-70216"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:36.370Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70216","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70217","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70217 — Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose inf…","description":"Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-70217"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:36.537Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70217","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70227","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70227 — Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i…","description":"Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70227","CVE-2026-85331","CVE-2026-85336","CVE-2026-85815"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:38.920Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70227","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85331","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85336","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85815","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70234","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70234 — Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information loc…","description":"Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70234"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:39.953Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70234","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70235","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70235 — Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing l…","description":"Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.","indicators":{"cves":["CVE-2026-70235"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:40.127Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70235","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70244","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70244 — Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a netw…","description":"Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-70244"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:41.243Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70244","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70248","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70248 — Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.","description":"Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.","indicators":{"cves":["CVE-2026-70248","CVE-2026-83636"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:42.070Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70248","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83636","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70259","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70259 — Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to d…","description":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-70259"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:44.420Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70259","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70260","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70260 — Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data H…","description":"Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70260","CVE-2026-70261"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:44.540Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70260","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70261","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70264","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70264 — Improper link resolution before file access ('link following') in Microsoft Defender allows an autho…","description":"Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70264"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:45.183Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70264","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70270","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70270 — Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized a…","description":"Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":["CVE-2026-70270"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:45.783Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70270","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70277","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70277 — Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose informatio…","description":"Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70277"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:47.000Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70277","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70280","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70280 — Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature…","description":"Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-70280"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:47.490Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70280","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70284","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70284 — Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis…","description":"Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70284","CVE-2026-70293"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:47.923Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70284","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70293","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70288","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70288 — Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an author…","description":"Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-70288","CVE-2026-96853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:48.640Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70288","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96853","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-81964","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-81964 — Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker t…","description":"Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-81964"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:54.537Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81964","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83500","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83500 — Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized atta…","description":"Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.","indicators":{"cves":["CVE-2026-83500"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:55.150Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83500","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83504","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83504 — Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attack…","description":"Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83504"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:55.313Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83504","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83515","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83515 — Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information…","description":"Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-83515"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:57.117Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83515","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83521","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83521 — Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov…","description":"Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-83521"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:58.087Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83521","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83565","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83565 — Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose i…","description":"Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83565"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:58.763Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83565","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83571","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83571 — Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose informat…","description":"Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83571"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:59.680Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83571","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83573","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83573 — Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elev…","description":"Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-83573"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:59.853Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83573","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83582","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83582 — Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information loca…","description":"Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83582"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:02.187Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83582","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83648","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83648 — Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s…","description":"Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83648"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:05.953Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83648","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83649","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83649 — Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorize…","description":"Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83649"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:06.100Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83649","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83651","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83651 — Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net…","description":"Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-83651","CVE-2026-85797"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:06.437Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83651","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85797","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83657","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83657 — Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perfo…","description":"Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-83657"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:07.380Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83657","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83658","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83658 — Improper access control in Windows Error Reporting allows an authorized attacker to disclose informa…","description":"Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83658"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:07.510Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83658","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83664","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83664 — Access of resource using incompatible type ('type confusion') in Windows Portable Device File System…","description":"Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83664"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:07.843Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83664","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83667","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83667 — Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service…","description":"Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:08.333Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83667","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83668","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83668 — Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information loc…","description":"Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83668"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:08.510Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83668","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83671","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83671 — Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83671"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:09.060Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83671","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83672","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83672 — Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allo…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83672"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:09.217Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83672","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83681","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83681 — Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locall…","description":"Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-83681"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:10.407Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83681","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83683","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83683 — Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to dis…","description":"Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-83683"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:10.707Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83683","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83685","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83685 — Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a netwo…","description":"Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-83685"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:10.903Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83685","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83695","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83695 — Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disc…","description":"Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83695","CVE-2026-83723"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:12.783Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83695","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83723","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83703","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83703 — Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an a…","description":"Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.","indicators":{"cves":["CVE-2026-83703"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:14.177Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83703","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83705","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83705 — Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allow…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83705"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:14.547Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83705","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83713","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83713 — Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a…","description":"Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83713","CVE-2026-85821","CVE-2026-85909","CVE-2026-96930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:15.703Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83713","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85821","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85909","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96930","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83714","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83714 — Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose informat…","description":"Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83714"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:15.877Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83714","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83719","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83719 — Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information lo…","description":"Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83719","CVE-2026-85835"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:16.753Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83719","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85835","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83733","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83733 — Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf…","description":"Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83733"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:18.673Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83733","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83737","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83737 — Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83737","CVE-2026-96927"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:19.137Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83737","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96927","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83747","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83747 — Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information…","description":"Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83747"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:20.303Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83747","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83755","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83755 — Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose informatio…","description":"Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:21.747Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83755","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83760","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83760 — Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose informati…","description":"Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83760"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:22.543Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83760","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83764","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83764 — Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose…","description":"Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83764"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:23.167Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83764","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83765","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83765 — Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information…","description":"Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83765"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:23.323Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83765","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83766","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83766 — Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security featur…","description":"Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.","indicators":{"cves":["CVE-2026-83766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:23.500Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83766","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83773","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83773 — Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83773"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:25.740Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83773","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83774","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83774 — Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83774","CVE-2026-83897","CVE-2026-83909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:25.867Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83774","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83897","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83909","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83776","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83776 — Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileg…","description":"Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-83776"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:26.230Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83776","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83786","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83786 — Generation of error message containing sensitive information in Windows NTFS allows an authorized at…","description":"Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83786"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:28.053Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83786","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83787","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83787 — Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker…","description":"Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-83787"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:28.237Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83787","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83788","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83788 — Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a phy…","description":"Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.","indicators":{"cves":["CVE-2026-83788"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:28.390Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83788","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83794","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83794 — Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose i…","description":"Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83794"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:29.293Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83794","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83798","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83798 — Improper verification of cryptographic signature in Windows Update Stack allows an authorized attack…","description":"Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.","indicators":{"cves":["CVE-2026-83798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:29.953Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83798","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83835","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83835 — Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose…","description":"Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83835"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:31.397Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83835","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83849","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83849 — Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:33.660Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83849","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83854","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83854 — Improper access control in Windows Notification allows an authorized attacker to disclose informatio…","description":"Improper access control in Windows Notification allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:34.360Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83854","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83864","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83864 — Improper access control in Windows NTFS allows an authorized attacker to disclose information locall…","description":"Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83864"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:35.853Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83864","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83865","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83865 — Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform t…","description":"Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-83865"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:36.017Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83865","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83870","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83870 — Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disc…","description":"Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83870"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:36.853Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83870","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83885","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83885 — Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an auth…","description":"Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.","indicators":{"cves":["CVE-2026-83885"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:39.303Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83885","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83888","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83888 — Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over…","description":"Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-83888"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:39.710Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83888","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83893","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83893 — Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83893"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:40.533Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83893","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83895","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83895 — Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elev…","description":"Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-83895"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:40.823Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83895","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83905","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83905 — Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows a…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83905"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:45.147Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83905","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83906","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83906 — Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacke…","description":"Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-83906"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:45.400Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83906","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83907","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83907 — Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows a…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-83907"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:45.557Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83907","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-83926","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-83926 — Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security…","description":"Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-83926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:48.933Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83926","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84007","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84007 — Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose infor…","description":"Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-84007"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:50.640Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84007","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84009","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84009 — Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authori…","description":"Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-84009"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:50.927Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84009","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84011","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84011 — Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security fea…","description":"Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-84011"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:51.077Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84011","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85320","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85320 — Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d…","description":"Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85320"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:53.223Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85320","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85323","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85323 — Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to per…","description":"Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.","indicators":{"cves":["CVE-2026-85323"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:53.710Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85323","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85337","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85337 — Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information…","description":"Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-85337"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:56.407Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85337","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85374","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85374 — Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall…","description":"Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85374","CVE-2026-85830"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:01.380Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85374","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85830","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85747","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85747 — Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, regis…","description":"Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a ma…","indicators":{"cves":["CVE-2026-85747"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:02.100Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://github.com/distribution/distribution/commit/960439b09f342cdeb8f1c0e18e8c7349bdcfbf80","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/distribution/distribution/releases/tag/v3.1.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/distribution/distribution/security/advisories/GHSA-685w-q87j-wqw3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/distribution/distribution/security/advisories/GHSA-685w-q87j-wqw3","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85790","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85790 — Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw…","description":"Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-85790"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:02.243Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85793","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85793 — Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Servic…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85793"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:02.750Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85793","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85794","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85794 — Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker…","description":"Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85794"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:02.907Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85794","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85805","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85805 — Improperly implemented security check for standard in Windows PowerShell allows an unauthorized atta…","description":"Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-85805"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:04.587Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85805","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85812","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85812 — Files or directories accessible to external parties in Windows Bind Filter Driver allows an authoriz…","description":"Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85812"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:05.840Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85812","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85816","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85816 — Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information ove…","description":"Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.","indicators":{"cves":["CVE-2026-85816"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:06.323Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85816","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85831","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85831 — Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose in…","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:08.663Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85831","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85840","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85840 — Files or directories accessible to external parties in Windows Event Viewer allows an authorized att…","description":"Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-85840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:09.873Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85840","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85841","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85841 — Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.","description":"Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.","indicators":{"cves":["CVE-2026-85841"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:10.050Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85841","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85852","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85852 — Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i…","description":"Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85852"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:11.453Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85852","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85857","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85857 — Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized…","description":"Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85857"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:12.227Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85857","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85859","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85859 — Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to d…","description":"Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-85859"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:12.540Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85859","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85865","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85865 — Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security fe…","description":"Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":["CVE-2026-85865"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:13.410Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85865","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85866","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85866 — Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85866"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:13.560Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85866","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85873","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85873 — Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to ele…","description":"Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-85873"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:14.780Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85873","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85910","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85910 — Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose informatio…","description":"Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:17.077Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85910","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85916","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85916 — Exposure of private personal information to an unauthorized actor in Azure Active Directory allows a…","description":"Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85916"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:17.827Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85916","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85935","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85935 — Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally…","description":"Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:20.157Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85935","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85938","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85938 — Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to discl…","description":"Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-85938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:20.537Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85938","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-85939","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85939 — Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature ove…","description":"Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-85939"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:20.703Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85939","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87698","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-87698 — Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to…","description":"Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-87698"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:22.523Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87698","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87709","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-87709 — Improper access control in Windows Host Guardian Service allows an authorized attacker to perform ta…","description":"Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-87709"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:24.133Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87709","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-87714","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-87714 — Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a ne…","description":"Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-87714"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:25.030Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87714","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88122","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88122 — Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.","description":"Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-88122","CVE-2026-88123","CVE-2026-88125","CVE-2026-88129","CVE-2026-88130"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:30.940Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88122","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88123","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88125","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88129","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88130","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88132","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88132 — Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information o…","description":"Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-88132"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:32.373Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88137","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88137 — Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl…","description":"Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-88137"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:33.210Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88137","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88158","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88158 — Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose info…","description":"Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-88158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:36.023Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88158","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88162","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88162 — Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perf…","description":"Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-88162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:36.740Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88162","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88167","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88167 — Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information ov…","description":"Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-88167"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:37.320Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88167","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88183","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88183 — Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform…","description":"Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-88183","CVE-2026-97005","CVE-2026-97744","CVE-2026-108453","CVE-2026-108455"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:39.290Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88183","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97005","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97744","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108453","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108455","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88195","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88195 — Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information o…","description":"Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-88195","CVE-2026-88201"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:41.000Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88195","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88201","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88203","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88203 — Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disc…","description":"Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-88203"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:41.930Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88203","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88226","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88226 — Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform…","description":"Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.","indicators":{"cves":["CVE-2026-88226"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:42.950Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88226","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-94506","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94506 — Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose informatio…","description":"Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-94506"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:44.070Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94506","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95630","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-95630 — Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Secu…","description":"Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interac…","indicators":{"cves":["CVE-2026-95630"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:44.573Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://www.adobe.com/trust/security/products/commerce/apsb26-153.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95904","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-95904 — Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose informat…","description":"Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-95904"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:44.810Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95904","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96204","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96204 — Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges…","description":"Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-96204"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:46.640Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96204","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96206","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96206 — Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclo…","description":"Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96206"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:46.757Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96206","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96218","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96218 — Improper access control in Windows Update Stack allows an authorized attacker to perform tampering l…","description":"Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-96218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:47.590Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96218","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96229","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96229 — Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information ov…","description":"Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-96229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:48.600Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96229","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96234","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96234 — Origin validation error in .NET allows an unauthorized attacker to disclose information over a netwo…","description":"Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-96234"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:49.223Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96238","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96238 — Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a…","description":"Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-96238"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:49.700Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96238","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96247","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96247 — Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclo…","description":"Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96247","CVE-2026-96849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:50.600Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96247","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96849","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96300","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96300 — Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to…","description":"Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-96300"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:51.793Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96300","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96303","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96303 — Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized at…","description":"Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":["CVE-2026-96303"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:52.300Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96311","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96311 — Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp…","description":"Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-96311"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:53.540Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96311","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96314","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96314 — Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information lo…","description":"Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96314"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:54.033Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96314","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96315","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96315 — Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering l…","description":"Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-96315"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:54.207Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96315","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96316","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96316 — Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att…","description":"Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-96316"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:54.373Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96316","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96321","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96321 — Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose inform…","description":"Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96321"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:55.157Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96321","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96846","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96846 — Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.","description":"Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:57.710Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96846","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96848","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96848 — Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose informa…","description":"Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96848"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:58.077Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96848","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96850","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96850 — Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacke…","description":"Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:58.337Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96850","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96851","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96851 — Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose inf…","description":"Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:58.490Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96851","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96854","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96854 — Access of resource using incompatible type ('type confusion') in Windows Device Association Service…","description":"Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:59.017Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96854","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96855","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96855 — Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to p…","description":"Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-96855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:59.187Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96855","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96857","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96857 — Files or directories accessible to external parties in Windows Projected File System allows an autho…","description":"Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96857"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:59.510Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96857","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96858","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96858 — Missing authentication for critical function in Windows Security Account Manager allows an authorize…","description":"Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-96858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:59.657Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96858","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96859","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96859 — Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio…","description":"Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96859"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:59.797Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96859","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96860","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96860 — Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information…","description":"Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96860"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:59.973Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96860","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96863","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96863 — Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate…","description":"Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":["CVE-2026-96863"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:00.493Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96863","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96865","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96865 — Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96865"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:00.883Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96865","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96910","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96910 — Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to…","description":"Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:01.677Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96910","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96921","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96921 — Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manag…","description":"Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96921"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:03.503Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96921","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96925","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96925 — Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose inf…","description":"Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96925"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:04.047Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96925","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96935","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96935 — Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:05.740Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96935","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96944","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96944 — Insertion of sensitive information into externally-accessible file or directory in Windows Storage a…","description":"Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.","indicators":{"cves":["CVE-2026-96944"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:06.590Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96944","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97740","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97740 — Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel…","description":"Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-97740"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:11.190Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97740","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97743","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97743 — Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information ove…","description":"Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-97743"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:11.567Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97743","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97782","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97782 — Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampe…","description":"Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.","indicators":{"cves":["CVE-2026-97782"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:16.323Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97782","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97790","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97790 — Improper link resolution before file access ('link following') in Windows Container Isolation FS Fil…","description":"Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.","indicators":{"cves":["CVE-2026-97790"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:17.097Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97790","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97813","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97813 — Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information…","description":"Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-97813"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:19.607Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97813","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97817","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97817 — Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over…","description":"Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-97817"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:20.257Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97817","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97828","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97828 — Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.","description":"Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-97828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:22:22.180Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97828","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103850","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103850 — Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosur…","description":"Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file…","indicators":{"cves":["CVE-2026-103850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:11.387Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-stager/apsb26-170.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103852","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103852 — Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an…","description":"Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in…","indicators":{"cves":["CVE-2026-103852"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:11.793Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-stager/apsb26-170.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103853","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103853 — Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit…","description":"Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-103853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:11.910Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-171.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103855","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103855 — Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an applicatio…","description":"Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a vic…","indicators":{"cves":["CVE-2026-103855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:12.137Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-171.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106628","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106628 — Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att…","description":"Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in t…","indicators":{"cves":["CVE-2026-106628","CVE-2026-106632","CVE-2026-107682","CVE-2026-110074","CVE-2026-110075","CVE-2026-110076","CVE-2026-110077","CVE-2026-110078","CVE-2026-110079","CVE-2026-110080","CVE-2026-48398","CVE-2026-83958","CVE-2026-83960"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:16.393Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110082","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110082 — Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a l…","description":"Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is chan…","indicators":{"cves":["CVE-2026-110082"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:26.970Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://helpx.adobe.com/security/products/experience-manager/apsb26-152.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-56826","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-56826 — Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could…","description":"Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting could directly invoke destructive actions through the Livewire endpoint because packages/admin/src/Livewire/Components/Settings/Zones/ZoneShippingOpti…","indicators":{"cves":["CVE-2026-56826"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:29.617Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/shopperlabs/shopper/commit/bf72e2753e21296184596d507336c7d65ecd46ff","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shopperlabs/shopper/pull/570","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shopperlabs/shopper/releases/tag/v2.9.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shopperlabs/shopper/security/advisories/GHSA-f7h9-qv4x-9x57","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shopperlabs/shopper/security/advisories/GHSA-f7h9-qv4x-9x57","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63147","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63147 — Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that all…","description":"Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a file with HTML/script markup embedded in its filename, which bypasses the paramFilter since uploaded-file names arrive through $_FILES…","indicators":{"cves":["CVE-2026-63147","CVE-2026-63148","CVE-2026-63157","CVE-2026-63168","CVE-2026-63169","CVE-2026-63171"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:30.350Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-stored-xss-via-uploaded-file-name","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-stored-xss-via-poll-response-attachment-filename","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-stored-xss-via-links-module","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-stored-xss-via-nested-post-array-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-stored-xss-via-messenger-iframe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-stored-xss-via-category-description","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100126","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100126 — Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…","description":"Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","indicators":{"cves":["CVE-2026-100126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:14.640Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/bridge/apsb26-167.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100130","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100130 — Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosu…","description":"Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious fil…","indicators":{"cves":["CVE-2026-100130","CVE-2026-100131"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:15.100Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-sampler/apsb26-159.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103822","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103822 — Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclos…","description":"Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious fi…","indicators":{"cves":["CVE-2026-103822","CVE-2026-103825"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:23.323Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-designer/apsb26-169.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103823","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103823 — Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result…","description":"Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti…","indicators":{"cves":["CVE-2026-103823","CVE-2026-103827"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:23.447Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-designer/apsb26-169.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103824","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103824 — Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in…","description":"Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction…","indicators":{"cves":["CVE-2026-103824","CVE-2026-103826","CVE-2026-103828","CVE-2026-103829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:23.560Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/substance3d-designer/apsb26-169.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104587","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104587 — blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The…","description":"blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses text/template instead of html/template, failing to perform context-aware auto-escaping on the URL and DisplayURL fields of bookmarks in internal/webui/templates/bookmarks.html. An at…","indicators":{"cves":["CVE-2026-104587"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:25.703Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/AmalJafarzade/CVE-2026-104587","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/blob42/gosuki","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/AmalJafarzade/CVE-2026-104587","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105896","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105896 — Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an ap…","description":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in th…","indicators":{"cves":["CVE-2026-105896","CVE-2026-95640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:29.130Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107369","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107369 — The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL. The SDK then…","description":"The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL. The SDK then stores this value and, in a later step, reconstructs it for the post-authentication redirect. The reconstruction logic can produce a URL that browsers interpret as an absolute or scheme-relative path,…","indicators":{"cves":["CVE-2026-107369"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:32.093Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-5vvp-h2v6-59j6","label":"psirt@okta.com","domainType":"primary"},{"url":"https://trust.okta.com/security-advisories/improper-validation-of-post-login-redirect-url-in-nextjs-auth0-cve-2026-107369","label":"psirt@okta.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107370","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107370 — When a username for an Active Directory connection is a domain without a local part, the auth0-lock…","description":"When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters.","indicators":{"cves":["CVE-2026-107370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:32.207Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/auth0/lock/security/advisories/GHSA-mp8m-wcxp-w648","label":"psirt@okta.com","domainType":"primary"},{"url":"https://trust.okta.com/security-advisories/improper-request-handling-for-active-directory-logins-in-auth0-lock-cve-2026-107370","label":"psirt@okta.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107371","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107371 — When the authorize() method is called with a maxAge parameter, the auth0.js library does not validat…","description":"When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time claim in the resulting ID token against the requested maxAge value. As a result, an application may process an ID token that represents an authentication event older than the requested…","indicators":{"cves":["CVE-2026-107371"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:32.317Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/auth0/auth0.js/security/advisories/GHSA-42v6-5rcc-mq4v","label":"psirt@okta.com","domainType":"primary"},{"url":"https://trust.okta.com/security-advisories/missing-verification-of-auth_time-claim-in-auth0-js-cve-2026-107371","label":"psirt@okta.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11713","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11713 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege esca…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.","indicators":{"cves":["CVE-2026-11713"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:36.760Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.ibm.com/support/pages/node/7291394","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14532","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-14532 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attac…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.","indicators":{"cves":["CVE-2026-14532"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:37.180Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.ibm.com/support/pages/node/7291394","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14909","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-14909 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information d…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled.","indicators":{"cves":["CVE-2026-14909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:37.510Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.ibm.com/support/pages/node/7291394","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19810","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19810 — Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cros…","description":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting…","indicators":{"cves":["CVE-2026-19810"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:37.943Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38870","label":"secure@symantec.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63156","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63156 — Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that…","description":"Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML attributes by manipulating the visioUrl parameter, which was not routed through the URL-sanitizing branch of the parameter filter and was urld…","indicators":{"cves":["CVE-2026-63156"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:40.243Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/xech/agora-project/releases/tag/26.10","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.agora-project.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/omnispace-agora-project-reflected-xss-via-visiourl-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-67626","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-67626 — Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a…","description":"Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-67626"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:41.487Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67626","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70189","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70189 — Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.","indicators":{"cves":["CVE-2026-70189","CVE-2026-88089"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:05.540Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70189","label":"secure@microsoft.com","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88089","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77816","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77816 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could all…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information.","indicators":{"cves":["CVE-2026-77816"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:21.033Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.ibm.com/support/pages/node/7291394","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78628","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78628 — The Okta Credential Provider for Windows does not validate a serialized credential buffer before int…","description":"The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate unexpectedly…","indicators":{"cves":["CVE-2026-78628"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:21.630Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://trust.okta.com/security-advisories/improper-input-validation-in-the-okta-credential-provider-for-windows-cve-2026-78628","label":"psirt@okta.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78632","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78632 — The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\\ALL SERVICES and…","description":"The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES en…","indicators":{"cves":["CVE-2026-78632"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:21.747Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://trust.okta.com/security-advisories/insecure-default-file-permissions-in-okta-radius-agent-windows-installer-cve-2026-78632","label":"psirt@okta.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78633","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78633 — The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attr…","description":"The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests.","indicators":{"cves":["CVE-2026-78633"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:21.853Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://trust.okta.com/security-advisories/denial-of-service-in-okta-radius-agent-packet-parser-cve-2026-78633","label":"psirt@okta.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79715","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79715 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to…","description":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory.","indicators":{"cves":["CVE-2026-79715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:18:21.970Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://www.ibm.com/support/pages/node/7291394","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85473","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85473 — The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp,…","description":"The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affect…","indicators":{"cves":["CVE-2026-85473"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:19.020Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/auth0/java-jwt/security/advisories/GHSA-cg7w-5cc2-f2xm","label":"psirt@okta.com","domainType":"primary"},{"url":"https://trust.okta.com/security-advisories/out-of-range-timestamp-claim-handling-in-auth0-java-jwt-cve-2026-85473","label":"psirt@okta.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88084","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88084 — Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to…","description":"Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-88084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:42.933Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88084","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88086","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88086 — Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adj…","description":"Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.","indicators":{"cves":["CVE-2026-88086"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:43.183Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88086","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-94520","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94520 — Use of externally-controlled format string in SQL Server allows an authorized attacker to deny servi…","description":"Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.","indicators":{"cves":["CVE-2026-94520"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:19:58.337Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103820","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103820 — CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory…","description":"CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended r…","indicators":{"cves":["CVE-2026-103820"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:26.190Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.adobe.com/trust/security/products/content-credentials-sdk/apsb26-163.html","label":"psirt@adobe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110143","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110143 — Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed…","description":"Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110143"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:34.100Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/554531101","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110146","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110146 — Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leve…","description":"Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110146"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:34.423Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/561039723","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110150","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110150 — Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a loc…","description":"Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:34.850Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/561334760","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110160","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110160 — Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attack…","description":"Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:35.943Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/552510359","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110170","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110170 — Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read…","description":"Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110170"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:37.017Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/496308073","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103425","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103425 — The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' p…","description":"The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…","indicators":{"cves":["CVE-2026-103425"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:16:55.793Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php#L1099","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php#L1789","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php#L1802","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php#L260","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3728015/booking-package/trunk/index.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/10293e5a-15ea-42c1-a0df-b95f723a75a3?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107652","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107652 — The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File D…","description":"The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1. This is due to the plugin storing arbitrary (non-form-tag) submission fields in its db7_forms row and the process_bulk_action() delete handler then mat…","indicators":{"cves":["CVE-2026-107652"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:16:57.297Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/contact-form-cfdb7/tags/1.4.0/contact-form-cfdb-7.php#L170","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/contact-form-cfdb7/tags/1.4.0/inc/admin-subpage.php#L325","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/contact-form-cfdb7/tags/1.4.0/inc/admin-subpage.php#L329","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3737068%40contact-form-cfdb7&new=3737068%40contact-form-cfdb7","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7de3606a-254c-4e5f-9499-b1cc79dce7c8?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86573","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86573 — Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver…","description":"Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.\n\nThis issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A.","indicators":{"cves":["CVE-2026-86573"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:17:01.147Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-137/index.html","label":"hirt@hitachi.co.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86607","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86607 — Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This is…","description":"Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator.\n\n\nThis issue affects Hitachi Ops Center Administrator: before 11.0.9-01.","indicators":{"cves":["CVE-2026-86607"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T02:17:01.270Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-138/index.html","label":"hirt@hitachi.co.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100193","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100193 — The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected…","description":"The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke…","indicators":{"cves":["CVE-2026-100193"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:03.967Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/classes/Lesson.php#L1018","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/templates/learning-area/lesson/content.php#L27","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/templates/learning-area/lesson/content.php#L56","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3730615/tutor/trunk/templates/learning-area/lesson/content.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4322fce1-0403-4458-82e3-7d374ab724c9?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16495","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-16495 — The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scrip…","description":"The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…","indicators":{"cves":["CVE-2026-16495"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:18.150Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/widget-countdown/tags/3.0.1/includes/legacy/front_end.php#L169","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7d757080-d2dc-49f9-bdc6-dba762a8f981?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95807","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-95807 — The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Sho…","description":"The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and including, 8.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level acce…","indicators":{"cves":["CVE-2026-95807"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:18:56.290Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://github.com/foliovision/fv-wordpress-flowplayer/releases/tag/8.1.8","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/controller/frontend.php#L710","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/controller/shortcodes.php#L33","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fv-player/trunk/models/fv-player.php#L1358","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2d954a0b-00cd-4666-bd59-f93d78dc38ef?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97020","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97020 — The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata'…","description":"The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and a…","indicators":{"cves":["CVE-2026-97020"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:19:04.767Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/pomo-editor/trunk/includes/class-pomoeditor-manager.php#L110","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/pomo-editor/trunk/includes/class-pomoeditor-manager.php#L115","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/pomo-editor/trunk/includes/class-pomoeditor-manager.php#L177","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/pomo-editor/trunk/includes/class-pomoeditor-manager.php#L41","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/pomo-editor/trunk/includes/class-pomoeditor-system.php#L78","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a06e1a22-f660-401b-bfbf-0064a9220c26?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97471","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97471 — The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in a…","description":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the 'args[link_target]' parameter. This makes it possible for unauthenticated attackers to extract arbitrary user meta values for any user ID, including ad…","indicators":{"cves":["CVE-2026-97471"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:19:05.483Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://avada.com/blog/version-7-16-2-security-update/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ebbd41a8-b9ff-4afe-bcfd-1df52d8d3b5f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101926","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101926 — The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via t…","description":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' parameter of the 'woocommerce_remove_variations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficie…","indicators":{"cves":["CVE-2026-101926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:42.210Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/woo-poly-integration/tags/1.5.0/src/Hyyan/WPI/Product/Variable.php#L280","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-poly-integration/tags/1.5.0/src/Hyyan/WPI/Product/Variable.php#L35","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-poly-integration/tags/1.5.0/src/Hyyan/WPI/Product/Variation.php#L146","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woo-poly-integration/tags/1.5.0/src/Hyyan/WPI/Product/Variation.php#L168","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ccf17caa-3f05-4461-b258-ae655d95ec2e?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103369","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103369 — The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to Sto…","description":"The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'response' parameter in all versions up to, and including, 4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att…","indicators":{"cves":["CVE-2026-103369"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:42.340Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-share-buttons-analytics-by-getsocial/tags/4.5/lib/gs.php#L72","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-share-buttons-analytics-by-getsocial/tags/4.5/tmpl/alerts.php#L18","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-share-buttons-analytics-by-getsocial/tags/4.5/wp-share-buttons-analytics-getsocial.php#L38","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-share-buttons-analytics-by-getsocial/tags/4.5/wp-share-buttons-analytics-getsocial.php#L54","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/86f9c68f-73ab-4f2b-8424-8515cdf82577?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110451","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110451 — Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined…","description":"Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.","indicators":{"cves":["CVE-2026-110451"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:43.073Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110452","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110452 — The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who…","description":"The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.","indicators":{"cves":["CVE-2026-110452"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:43.220Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110453","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110453 — Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by buil…","description":"Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.","indicators":{"cves":["CVE-2026-110453"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:43.377Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-46449","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-46449 — The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege esc…","description":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting i…","indicators":{"cves":["CVE-2026-46449"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:44.110Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-50215","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-50215 — A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Plat…","description":"A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket to…","indicators":{"cves":["CVE-2026-50215"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:44.260Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog/","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-50216","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-50216 — An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extensio…","description":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows…","indicators":{"cves":["CVE-2026-50216"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T06:17:06.597Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog/","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-50217","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-50217 — A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent…","description":"A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of service (system crash / BSOD) via an outbound ICMPv6 packet containing an IPv6 Hop-by-Hop extension header. When the IPv6 ICMP redirect p…","indicators":{"cves":["CVE-2026-50217"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T06:17:06.760Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog/","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104644","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104644 — The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape…","description":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes i…","indicators":{"cves":["CVE-2026-104644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.250Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/874eeea9-59a1-4ec0-b884-76d1bb6dba22/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104751","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104751 — The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check befor…","description":"The Rank Math SEO  WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it.","indicators":{"cves":["CVE-2026-104751"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.363Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/b68d607d-aad8-46ad-a522-5eaeea738d8c/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105261","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105261 — The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change…","description":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element,…","indicators":{"cves":["CVE-2026-105261"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.480Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/b340566c-6c45-4391-aefe-76ae7f5ba77f/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105969","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105969 — The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict acce…","description":"The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable identifie…","indicators":{"cves":["CVE-2026-105969"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.593Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/bb9fa8cf-413f-45b4-9930-59213104ce28/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105975","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105975 — The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of…","description":"The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-supplied parameters, allowing unauthenticated attackers to mark payment records as paid, destroy genuine payment records,…","indicators":{"cves":["CVE-2026-105975"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.710Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/a5da90f5-563d-4397-b3bc-38bd1dc9aefb/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106098","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106098 — The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of i…","description":"The WP Data Access  WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even…","indicators":{"cves":["CVE-2026-106098"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.820Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/f062a098-c00c-49f8-a32a-58b18ebcebe2/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106099","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106099 — The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action…","description":"The WP Data Access  WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access  WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated at…","indicators":{"cves":["CVE-2026-106099"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:00.923Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/65544ed7-d80b-439e-bf8e-73e94041b6bb/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106166","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106166 — The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request…","description":"The NEX-Forms  WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing it…","indicators":{"cves":["CVE-2026-106166"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.030Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/aa33ce05-091d-4fef-b875-4fedb8b8fc9d/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106469","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106469 — The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its f…","description":"The Gutenverse Form  WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in the…","indicators":{"cves":["CVE-2026-106469"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.137Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/4cccafbb-622e-4363-ade9-dc755d082a9f/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106646","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106646 — The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can…","description":"The Classified Listing  WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media item, allowing any authenticated user with a subscriber-level account to modify, corrupt or delete media-library attachme…","indicators":{"cves":["CVE-2026-106646"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.243Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/84adffd9-6982-4c05-a42d-be208035d9a8/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107158","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107158 — The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or va…","description":"The LTL Freight Quotes  WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes  WordPress plugin before 4.2.19's stored settings.","indicators":{"cves":["CVE-2026-107158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.460Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/e4c4700a-25c6-4f8f-b017-ea32a81ffcb6/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107160","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107160 — The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or in…","description":"The LTL Freight Quotes  WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.","indicators":{"cves":["CVE-2026-107160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.570Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/2672da6c-f494-4449-90fd-fb1c2dd78235/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107178","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107178 — The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery ligh…","description":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every page that embeds the gallery, allowing users with contributor-level access and above to store JavaScript that executes in…","indicators":{"cves":["CVE-2026-107178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.673Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/ecc86d5a-7a2f-479e-b5f9-cf86f14fc404/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107319","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107319 — The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verific…","description":"The GamiPress  WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing any authenticated user, such as a Subscriber, to read arbitrary entries from its activity log, including other users' points balances and earn…","indicators":{"cves":["CVE-2026-107319"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.780Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/a5ab2959-a7ba-4b62-8f5e-d2527ffeb1bd/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107320","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107320 — The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity l…","description":"The GamiPress  WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity logs of all users. This is an incomplete fix of CVE-2026-13450.","indicators":{"cves":["CVE-2026-107320"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:01.887Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wpscan.com/vulnerability/034edcec-6aee-481c-8550-6762ab96725f/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108064","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108064 — The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check on on…","description":"The WP Encryption  WordPress plugin before 7.8.8.2 does not perform a capability or nonce check on one of the handlers that drives its SSL certificate-provisioning routine, allowing unauthenticated users to make the WP Encryption  WordPress plugin before 7.8.8.2 overwrite the site's certificate priv…","indicators":{"cves":["CVE-2026-108064"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:02.200Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/5657137d-f496-43f7-9067-e05b99c36006/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108069","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108069 — The Sunshine Photo Cart WordPress plugin before 3.7.4 does not check whether a visitor is permitted…","description":"The Sunshine Photo Cart  WordPress plugin before 3.7.4 does not check whether a visitor is permitted to access a restricted gallery before accepting comment submissions for its images, while it does perform that check when displaying comments, allowing unauthenticated attackers to inject attacker-ch…","indicators":{"cves":["CVE-2026-108069"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:02.407Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/db8bf2bf-1c15-4d41-b576-7c30a92a0e37/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110465","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110465 — Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authentica…","description":"Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.","indicators":{"cves":["CVE-2026-110465","CVE-2026-110467"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:02.523Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.twcert.org.tw/en/cp-139-11273-b9383-2.html","label":"twcert@cert.org.tw","domainType":"other"},{"url":"https://www.twcert.org.tw/tw/cp-132-11272-91666-1.html","label":"twcert@cert.org.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110466","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110466 — Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remot…","description":"Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.","indicators":{"cves":["CVE-2026-110466"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:02.680Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.twcert.org.tw/en/cp-139-11273-b9383-2.html","label":"twcert@cert.org.tw","domainType":"other"},{"url":"https://www.twcert.org.tw/tw/cp-132-11272-91666-1.html","label":"twcert@cert.org.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85000","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85000 — The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an un…","description":"The EmbedPress  WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores attacker-controlled cache entries, allowing unauthenticated attackers to consume the site…","indicators":{"cves":["CVE-2026-85000"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:03.420Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/3c7f7d07-2c46-4839-b97f-27fe41e6292d/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85345","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85345 — The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user…","description":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Requ…","indicators":{"cves":["CVE-2026-85345"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:03.530Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/d1a5d12d-a7ce-43e1-b7c5-752453bc97e9/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86797","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86797 — The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link…","description":"The Pricing Table  WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributor-level access and above to store malicious scripts that execute when another user views and interacts with the affected…","indicators":{"cves":["CVE-2026-86797"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:03.753Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/9a03a070-55a8-4d19-8bb3-e77ce6adc583/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87843","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-87843 — The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the authent…","description":"The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the authenticity of the payment provider's response when a customer returns from the hosted payment page, nor bind that response to the targeted order or check the amount, allowing unauthenticated attackers to m…","indicators":{"cves":["CVE-2026-87843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:03.963Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/07a7f21a-893b-45e4-9ef8-959cd08520cc/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87968","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-87968 — The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchan…","description":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor c…","indicators":{"cves":["CVE-2026-87968"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:04.070Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/92b501c0-e237-4dd5-a88a-8472398b1c7e/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87974","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-87974 — The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its p…","description":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers to…","indicators":{"cves":["CVE-2026-87974"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:04.170Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/3f6338bf-9d0d-4718-aefb-51d13800cec1/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88927","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88927 — The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.14 does not verify tha…","description":"The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.14 does not verify that a user owns or may write to the album an upload is assigned to, allowing users with a subscriber-level account or above to place media into another user's private album and have it attributed to tha…","indicators":{"cves":["CVE-2026-88927"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:04.273Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/d60b3465-1e12-4738-b3dd-d45608eac78d/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-90989","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-90989 — The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users wit…","description":"The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the email addresses of the repository's staff.","indicators":{"cves":["CVE-2026-90989"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:04.810Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/0b78000b-99ee-4cee-a7e9-369fc8c98093/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91076","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-91076 — The Robokassa payment gateway for Woocommerce WordPress plugin before 1.9.0 does not verify the auth…","description":"The Robokassa payment gateway for Woocommerce WordPress plugin before 1.9.0 does not verify the authenticity of an incoming payment-notification request before acting on the order named in it, allowing unauthenticated attackers to force any WooCommerce order into a failed state. Order identifiers ar…","indicators":{"cves":["CVE-2026-91076"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:04.933Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/9ba439de-33e3-4d79-b54a-8bf098e89f5f/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92409","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92409 — The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a s…","description":"The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when the page is v…","indicators":{"cves":["CVE-2026-92409"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.043Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/1c74b76e-fd6f-4dbc-aba1-f7de2444ee95/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92426","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92426 — The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the reque…","description":"The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users.","indicators":{"cves":["CVE-2026-92426"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.147Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/202f347c-962d-47a9-9dbd-70a20893db69/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94254","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94254 — The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when tot…","description":"The SellKit  WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing unauthenticated attackers to place orders for any purchasable product at a price of their own choosing.","indicators":{"cves":["CVE-2026-94254"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.257Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/e99f69f2-1a21-42fa-b122-ecf69856cc39/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94260","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94260 — The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the…","description":"The Sifalo Pay  WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment session metadata onto any order in the store and to force any order awaiting payme…","indicators":{"cves":["CVE-2026-94260"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.370Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/cbb9ff30-9145-43a8-ab8a-157a5a0ef9dd/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94261","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94261 — The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction identifier b…","description":"The Sifalo Pay  WordPress plugin before 2.5.3 does not verify that a payment transaction identifier belongs to the order it is confirming, nor that the requester owns that order, allowing unauthenticated attackers holding one valid transaction identifier from a payment of their own to mark arbitrary…","indicators":{"cves":["CVE-2026-94261"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.467Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/3a9d4c71-6cbd-44ff-a6d8-802107491212/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94360","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94360 — The Paymentfor Gateway for WooCommerce WordPress plugin before 1.0.6 does not verify the authenticit…","description":"The Paymentfor Gateway for WooCommerce WordPress plugin before 1.0.6 does not verify the authenticity of an inbound payment notification before marking an order as paid, allowing unauthenticated attackers to mark orders as paid without any payment being completed.","indicators":{"cves":["CVE-2026-94360"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.573Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/f9ef7bfe-3e25-4edf-9c02-3fa9e2873e84/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96900","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96900 — The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownershi…","description":"The Cart Abandonment Recovery for WooCommerce  WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record before deleting or overwriting it, allowing unauthenticated attackers who know a customer's email to destroy or tamper with that custome…","indicators":{"cves":["CVE-2026-96900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.683Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/67918de2-afc0-468d-8a66-290dc60fe8ec/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96904","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96904 — The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to vi…","description":"The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any listi…","indicators":{"cves":["CVE-2026-96904"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:05.787Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/b3df7272-9b79-4a3c-b230-6c3e97c4bbe5/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-9373","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-9373 — The PeproDev Branches Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all v…","description":"The PeproDev Branches Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a…","indicators":{"cves":["CVE-2025-9373"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:02.077Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://github.com/peprodev/mapify","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3736746%40pepro-mapify%2Ftags%2F3.0.2&old=3736735%40pepro-mapify%2Ftags%2F3.0.1","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/pepro-mapify/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/486d1974-e068-45ad-98be-691c1bc9a841?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103907","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103907 — The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due…","description":"The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on both the 'jkit_post_block' and 'jeg_find_author' AJAX actions in versions up to, and including, 3.2.19. The 'wp_ajax_jkit_post_block' handler (registered generically f…","indicators":{"cves":["CVE-2026-103907"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:02.847Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/tags/3.2.19/lib/jeg-element/includes/class/class-ajax.php#L101","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/tags/3.2.19/lib/jeg-element/includes/class/elements/class-elements-option-abstract.php#L106","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/tags/3.2.19/lib/jeg-element/includes/class/elements/class-elements-option-abstract.php#L63","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3722837/jeg-elementor-kit","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/936186f9-185a-481e-a8df-5a2a3def9188?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107650","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107650 — The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPre…","description":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_title' parameter in all versions up to, and including, 2.8.190 due to insufficient input sanitization and output escaping. This makes it p…","indicators":{"cves":["CVE-2026-107650","CVE-2026-107754","CVE-2026-111069","CVE-2026-110703"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:04.417Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://github.com/AyeCode/geodirectory/archive/refs/heads/master.zip","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/includes/class-geodir-ajax.php#L821","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/includes/class-geodir-post-data.php#L1759","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/includes/post-functions.php#L1752","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/includes/widgets/class-geodir-widget-dynamic-content.php#L444","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3736457/geodirectory/trunk/includes/post-functions.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9628d0dc-a25a-4cc5-bea7-92aae8f45c0d?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/assets/js/map.js#L1431","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/assets/js/map.js#L605","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/includes/class-geodir-media.php#L635","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/includes/class-geodir-post-data.php#L329","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.188/includes/image-functions.php#L145","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3736457/geodirectory/trunk/assets/js/map.js","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/190d9996-5a3b-477f-9191-d60ce3c33dd9?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.192/includes/class-geodir-ajax.php#L821","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.192/includes/class-geodir-post-data.php#L1661","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.192/includes/class-geodir-post-data.php#L450","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.192/includes/custom-fields/output-filter-functions.php#L42","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.192/includes/post-functions.php#L1950","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3748786/geodirectory/trunk/includes/custom-fields/output-filter-functions.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/32052509-2fa6-4317-8861-314e6da0869f?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/includes/class-geodir-ajax.php#L821","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/includes/class-geodir-post-data.php#L1661","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/includes/post-functions.php#L2032","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.191/vendor/ayecode/wp-ayecode-ui/includes/inc/bs5-js.php#L328","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3746728%40geodirectory&new=3746728%40geodirectory","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2af46137-6cdc-4898-8d59-3c603ebe02c4?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107756","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107756 — The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display…","description":"The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + comment' parameter in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-l…","indicators":{"cves":["CVE-2026-107756"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:04.870Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/classes/core.php#L1087","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/classes/core.php#L1115","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/classes/core.php#L1277","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/classes/core.php#L57","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L1531","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L2112","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L2207","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/meow-lightbox/tags/5.6.2/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L503","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737480/meow-lightbox","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737480/meow-lightbox/trunk/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/69de4c0b-fda4-4dd0-80ae-2cdd53fc581b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107757","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107757 — The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…","description":"The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profile.php) + comment (wp-comments-post.php)' parameter in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping. This makes it possible fo…","indicators":{"cves":["CVE-2026-107757"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:05.040Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/classes/core.php#L103","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/classes/core.php#L215","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L2112","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L2207","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/gallery-custom-links/tags/2.3.3/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php#L502","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737485/gallery-custom-links","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737485/gallery-custom-links/trunk/vendor/kub-at/php-simple-html-dom-parser/src/KubAT/PhpSimple/lib/simple_html_dom.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f37a0db8-b13c-4d9f-bc6f-88576f9e3862?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110227","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110227 — Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exp…","description":"Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restricted Site Access: from n/a through 7.6.2.","indicators":{"cves":["CVE-2026-110227"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:05.340Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/restricted-site-access/vulnerability/wordpress-restricted-site-access-plugin-7-6-2-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100231","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100231 — A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing str…","description":"A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside the Basic Multilingual Plane (such as emoji) to an ASF container, the plugin incorrectly calculates the buffer size needed for the UTF-16LE repr…","indicators":{"cves":["CVE-2026-100231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:50.483Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-100231","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541468","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109969","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109969 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF…","description":"A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without explicit permission restrictions or peer credential verification. Under a permissive process umask, any local user can connect to the control socket and inject arbitrary device/k…","indicators":{"cves":["CVE-2026-109969"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:51.910Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109969","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550361","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109970","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109970 — A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11…","description":"A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plaintext to a file without setting restrictive permissions. Under the default process umask, the file is world-readable. Additionally, the PIN file is not reliably cleaned up if the decr…","indicators":{"cves":["CVE-2026-109970"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:52.137Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109970","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550362","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109971","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109971 — A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 toke…","description":"A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem.","indicators":{"cves":["CVE-2026-109971"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:53.440Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109971","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550363","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550363","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73794","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73794 — HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)","description":"HPE NonStop MODULAR NSJ  contains a predictable seed vulnerability in Random Number Generation (PRNG)","indicators":{"cves":["CVE-2026-73794"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:56.670Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100229","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100229 — A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds wr…","description":"A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field value is incorrectly accepted, causing the parser to write beyond the bounds of an internal structure. An attacker could ex…","indicators":{"cves":["CVE-2026-100229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:56.620Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-100229","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541471","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101301","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101301 — The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for t…","description":"The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated visitors to disable all of the site's automatically inserted snippets for their own requests.","indicators":{"cves":["CVE-2026-101301"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:56.760Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/e60dade1-a7af-4570-bfd6-669d10991d67/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103308","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103308 — The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of paym…","description":"The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is empty on a store which has not entered its credentials, allowing unauthenticated attackers to mark arbitrary orders as paid and to dis…","indicators":{"cves":["CVE-2026-103308"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:57.547Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/26bae5f0-510b-403e-bd69-c4aa2392406d/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73795","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73795 — A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.","description":"A security vulnerability in HPE NonStop TMF Auditread2 can cause  Denial of Service.","indicators":{"cves":["CVE-2026-73795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:04.600Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73796","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73796 — A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.","description":"A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.","indicators":{"cves":["CVE-2026-73796"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:04.717Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-82844","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-82844 — The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was comp…","description":"The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Commerce gateway, allowing unauthenticated visitors to submit paid forms without paying. The form's confirmation is delivered and its noti…","indicators":{"cves":["CVE-2026-82844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:05.283Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/e959ddad-8588-4136-8518-6b1d772a62c4/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88998","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88998 — The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming paym…","description":"The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the order or the amount, allowing unauthenticated attackers to forge a payment confirmation and mark arbitrary orders as paid without payi…","indicators":{"cves":["CVE-2026-88998"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:07.293Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/50fe4955-9193-4842-9ea6-1812d70d813e/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97315","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97315 — The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values s…","description":"The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that email.","indicators":{"cves":["CVE-2026-97315"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:09.100Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/83713678-7efc-4cfc-ba24-c624a1ef8622/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73797","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73797 — A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific A…","description":"A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.","indicators":{"cves":["CVE-2026-73797"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T12:17:17.837Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107417","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107417 — Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPre…","description":"Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push Notification for Post and BuddyPress: from n/a through 3.23…","indicators":{"cves":["CVE-2026-107417"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:23.007Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/push-notification-for-post-and-buddypress/vulnerability/wordpress-push-notification-for-post-and-buddypress-plugin-3-23-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107425","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107425 — Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-…","description":"Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7.","indicators":{"cves":["CVE-2026-107425"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:23.610Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/bus-ticket-booking-with-seat-reservation/vulnerability/wordpress-bus-ticket-booking-with-seat-reservation-plugin-5-9-7-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107433","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107433 — Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows…","description":"Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP OAuth Server: from n/a through 6.4.0.","indicators":{"cves":["CVE-2026-107433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:23.933Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/miniorange-oauth-20-server/vulnerability/wordpress-wp-oauth-server-plugin-6-4-0-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109968","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109968 — A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS…","description":"A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read the…","indicators":{"cves":["CVE-2026-109968"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:17:27.837Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109968","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462394","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101215","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101215 — Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Speci…","description":"Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.","indicators":{"cves":["CVE-2026-101215","CVE-2026-101216"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:29.217Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515611/dsa-2026-447-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-and-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101217","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101217 — Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathnam…","description":"Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.","indicators":{"cves":["CVE-2026-101217"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:29.470Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515611/dsa-2026-447-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-and-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104086","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104086 — 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 arch…","description":"7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s no_ids field is set so that the final metadata block’s expected size…","indicators":{"cves":["CVE-2026-104086"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:30.670Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://7-zip.org/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/p/sevenzip/discussion/45797/thread/db6922e1d0/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/7-zip-squashfs-uninitialized-memory-disclosure-via-uid-gid-table","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110652","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110652 — ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vuln…","description":"ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint that allows remote attackers to bypass the private-IP request-filtering-agent by exploiting the isInJwtToken flag when JWT verification is disabled in th…","indicators":{"cves":["CVE-2026-110652"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:43.983Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#1000","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ONLYOFFICE/DocumentServer/releases/tag/v10.0.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/onlyoffice-documentserver-before-ssrf-via-downloadfile-isinjwttoken-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-35161","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-35161 — Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lock…","description":"Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.","indicators":{"cves":["CVE-2026-35161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:44.890Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000518964/dsa-2026-439-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94348","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94348 — Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Spec…","description":"Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.","indicators":{"cves":["CVE-2026-94348"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:48.423Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000518964/dsa-2026-439-security-update-for-dell-powerscale-insightiq-multiple-vulnerabilities","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101019","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101019 — Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backe…","description":"Description\nNGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an expl…","indicators":{"cves":["CVE-2026-101019"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:01.697Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162615","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101025","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101025 — Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2…","description":"Description\n\n\nNGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests with…","indicators":{"cves":["CVE-2026-101025"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:01.880Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162614","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107381","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107381 — svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/Eleme…","description":"svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/ElementReference/Resolver.php builds the SVG <use> reference graph with a case-sensitive href attribute predicate before cleanHrefAttributes() normalizes mixed-case names. An attacker can provide xlink:HrE…","indicators":{"cves":["CVE-2026-107381"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:06.327Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/darylldoyle/svg-sanitizer/commit/2dff6628314de8519155b7feb218bbe132785757","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/darylldoyle/svg-sanitizer/releases/tag/1.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110257","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110257 — OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBoo…","description":"OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_bootstrap_methods without validating attribute_length. Attackers can supply a crafted class file of about 100 bytes that forces roughly 2 GB a…","indicators":{"cves":["CVE-2026-110257"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:07.350Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm/src/main/java/org/objectweb/asm/ClassReader.java#L3497","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/eb5fa95bb0670eaec2ecf9b8a3a501b48e5a967c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/456","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-5.0-before-9.11-excessive-memory-allocation-via-bootstrapmethods-attribute","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110258","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110258 — OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutine…","description":"OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule. Attackers can supply a crafted invalid class file with multiple RET instructions for one JSR, triggering a roughly 2 GB allocation th…","indicators":{"cves":["CVE-2026-110258"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:07.503Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm/src/main/java/org/objectweb/asm/Label.java#L568","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/4dabfe0aef14f8cccb0617640a4add8fbcc4ed36","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/458","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-3.0-before-9.11-excessive-memory-allocation-via-multiple-ret-instructions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110259","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110259 — OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmIn…","description":"OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service through crafted class files. Attackers can supply a class with a large method containing many long forward jumps, triggering unbounded toB…","indicators":{"cves":["CVE-2026-110259"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:07.650Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm/src/main/java/org/objectweb/asm/ClassWriter.java#L751","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/e9aca627c17e1619bcb8059afb43382dac6b275f","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/459","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-3.0-before-9.11-uncontrolled-recursion-via-classwriter-replaceasminstructions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110260","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110260 — OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.compute…","description":"OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS or COMPUTE_FRAMES. Attackers can supply a crafted class file with thousands of overlapping exception handlers, causing excessive Edge…","indicators":{"cves":["CVE-2026-110260"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:07.793Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm/src/main/java/org/objectweb/asm/MethodWriter.java#L1662","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/91057c98239d994aed5e46434e34e00d593c0daf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/461","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-3.0-before-9.11-quadratic-memory-allocation-via-exception-handlers","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110261","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110261 — OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust…","description":"OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES. Attackers can craft methods that make the unbounded MethodWriter.computeAllFrames() fix point algorithm converge slowly,…","indicators":{"cves":["CVE-2026-110261"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:07.950Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm/src/main/java/org/objectweb/asm/MethodWriter.java#L1595","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/ab68bbd2521359b7c8cd3517c6331ced3d817ed0","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/463","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-3.0-before-9.11-excessive-cpu-consumption-via-classwriter-compute-frames","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110263","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110263 — OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseTyp…","description":"OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type signatures. Attackers can supply a crafted class file with a long Signature attribute containing many nested type argument…","indicators":{"cves":["CVE-2026-110263"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:08.247Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm/src/main/java/org/objectweb/asm/signature/SignatureReader.java#L151","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/8f87fc0317a4c5ee8f538bcbb641928def25dbd6","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/465","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-3.0-before-9.11-uncontrolled-recursion-in-signaturereader","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110270","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110270 — OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons…","description":"OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory or work limits. Attackers can supply a crafted class file with nested subroutines to force O(2^n) memory allocation, causing an OutOfM…","indicators":{"cves":["CVE-2026-110270"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:08.407Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm-commons/src/main/java/org/objectweb/asm/commons/JSRInlinerAdapter.java#L232","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/f2b988af48719f85a274f2a05e37bc55c0cd22a1","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/466","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-3.0-before-9.11-exponential-memory-allocation-in-jsrinlineradapter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110591","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110591 — OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analy…","description":"OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files. Attackers can supply class files analysed through BasicVerifier, SimpleVerifier or SourceInterpreter to trigger unbounded…","indicators":{"cves":["CVE-2026-110591"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:09.910Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm-analysis/src/main/java/org/objectweb/asm/tree/analysis/Analyzer.java#L150","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/4632a2283f1192fd0e93035661b49568a7cb8b6c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/468","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-1.4.3-before-9.11-excessive-resource-consumption-via-analyzer","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110593","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110593 — BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email C…","description":"BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_body with django.template.Template(). Authenticated organization members can submit template tags through POST /api/accounts/<id>/crea…","indicators":{"cves":["CVE-2026-110593"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:10.277Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/Django-CRM/Django-CRM/blob/v1.14.5/backend/accounts/tasks.py#L45","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Django-CRM/Django-CRM/issues/826","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-110593","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/bottlecrm-through-1.14.5-server-side-template-injection-via-account-email-create-mail","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110594","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110594 — BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that all…","description":"BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers via unbounded routing rule regex patterns. Attackers can create a routing rule with a catastrophically backtracking pattern evaluated…","indicators":{"cves":["CVE-2026-110594"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:10.437Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/Django-CRM/Django-CRM/blob/v1.14.5/backend/cases/routing.py#L107-L114","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Django-CRM/Django-CRM/issues/830","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-110594","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/bottlecrm-0.43-through-1.14.5-redos-via-case-routing-rule-regex","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Django-CRM/Django-CRM/issues/830","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110595","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110595 — BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_uplo…","description":"BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before enforcing the 5 MB limit. Authenticated users with mass-import permission can send oversized CSV files concurrently to /api/contacts/import/ and /api/cases/im…","indicators":{"cves":["CVE-2026-110595"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:10.577Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/Django-CRM/Django-CRM/blob/v1.14.5/backend/cases/import_views.py#L44","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Django-CRM/Django-CRM/blob/v1.14.5/backend/contacts/import_views.py#L44","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Django-CRM/Django-CRM/issues/828","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-110595","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/bottlecrm-0.45-through-1.14.5-memory-exhaustion-via-contact-and-case-csv-import","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110596","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110596 — quirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/i…","description":"quirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/identify.c that allows attackers to hang quirc_end() with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of region_code…","indicators":{"cves":["CVE-2026-110596"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:10.797Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/dlbeer/quirc/blob/542848dd6b9b0eaa9587bbf25b9bc67bd8a71fca/lib/identify.c#L578-L636","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dlbeer/quirc/issues/162","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dlbeer/quirc/pull/159","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/quirc-alignment-pattern-infinite-loop-dos","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/quirc-through-1.2-denial-of-service-via-find-alignment-pattern-spiral-search","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110597","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110597 — Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFro…","description":"Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute() bounds ch…","indicators":{"cves":["CVE-2026-110597"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:10.953Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/syoyo/tinyexr/blob/6f470c9ab24bf3992bc512ce07e8ecb00d9bf105/tinyexr.h#L10551-L10621","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/syoyo/tinyexr/blob/6f470c9ab24bf3992bc512ce07e8ecb00d9bf105/tinyexr.h#L1207-L1266","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/tinyexr-multipart-header-stale-size-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/tinyexr-through-3.2.0-heap-out-of-bounds-read-via-parseexrmultipartheaderfrommemory","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/tinyexr-multipart-header-stale-size-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110598","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110598 — Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value(…","description":"Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic multi-value offsets. Attackers can craft PST, OST or PAB files with decreasing PT_MV_STRING8, PT_MV_UNICODE or PT_MV_BINAR…","indicators":{"cves":["CVE-2026-110598"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:11.103Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/libyal/libpff/blob/03545511ab7a7a609e50ec715bdd3985c3be71c5/libpff/libpff_multi_value.c#L207-L271","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libpff/blob/03545511ab7a7a609e50ec715bdd3985c3be71c5/libpff/libpff_record_entry.c#L2825-L2874","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libpff-multivalue-offset-underflow-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libyal-libpff-through-20260926-heap-out-of-bounds-read-via-libpff-record-entry-get-multi-value","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110600","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110600 — xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_…","description":"xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet Relati…","indicators":{"cves":["CVE-2026-110600"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:11.387Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/brechtsanders/xlsxio/blob/0.2.37/lib/xlsxio_read.c#L851-L866","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/brechtsanders/xlsxio/issues/151","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/xlsxio-relationship-missing-id-null-deref","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/xlsxio-through-0.2.37-null-pointer-dereference-via-worksheet-relationship-without-id","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/brechtsanders/xlsxio/issues/151","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/xlsxio-relationship-missing-id-null-deref","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110601","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110601 — libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability…","description":"libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF transparent color index against the palette size. Attackers can supply a crafted GIF with a small color table and large transparent ind…","indicators":{"cves":["CVE-2026-110601"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:11.530Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/libsixel/libsixel/blob/v1.10.5/src/fromgif.c#L219-L240","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/saitoha/libsixel/blob/v1.8.7/src/fromgif.c#L182-L248","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/saitoha/libsixel/commit/bdbab09816eb9188429c37a50b97c5e66dfe5047","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/saitoha/libsixel/issues/220","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/saitoha/libsixel/releases/tag/v1.8.7-r1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libsixel-gif-transparent-index-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libsixel-before-1.8.7-r1-and-1.9.0-through-1.10.5-heap-out-of-bounds-write-via-gif","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/saitoha/libsixel/issues/220","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110602","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110602 — libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in…","description":"libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an arbitrary-…","indicators":{"cves":["CVE-2026-110602"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:11.677Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/kyz/libmspack/blob/v0.11alpha/libmspack/mspack/kwajd.c#L111-L181","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kyz/libmspack/commit/4d868504114346aa767d435fbb89a8b76603493f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libmspack-kwaj-uninitialized-free","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libmspack-through-0-11alpha-uninitialized-pointer-free-via-kwajd-open-error-path","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libmspack-kwaj-uninitialized-free","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110603","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110603 — LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows atta…","description":"LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the…","indicators":{"cves":["CVE-2026-110603"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:11.820Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/LASzip/LASzip/blob/3.5.0/src/laszip_dll.cpp#L3967-L3995","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LASzip/LASzip/blob/3.5.0/src/laszip_dll.cpp#L497-L511","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LASzip/LASzip/commit/c9bfd3e68d65c84d513a2286ae06cbbe17afda02","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/laszip-vlr-uninitialized-free","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/laszip-through-3.5.0-invalid-free-via-truncated-vlr-header-in-laszip-read-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110605","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110605 — libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash app…","description":"libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. Attackers can provide a crafted TrueType font whose NaN glyph coordinates bypass clip_points(), causing an out-of-bounds raster re…","indicators":{"cves":["CVE-2026-110605"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:12.160Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/tomolt/libschrift/blob/v0.10.2/schrift.c#L1422-L1503","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/tomolt/libschrift/blob/v0.10.2/schrift.c#L542","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/tomolt/libschrift/issues/46","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libschrift-unitsperem-zero-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libschrift-through-0.10.2-divide-by-zero-via-unitsperem-in-draw-line","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110607","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110607 — BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that…","description":"BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request /member/payment/test_po…","indicators":{"cves":["CVE-2026-110607"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:12.457Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/BizSpringSource/bizspring-shop-opensource","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/BizSpringSource/bizspring-shop-opensource/blob/cf22d39daaf17f430d8fc1fb698a2f6e515e1808/bizspring-open/bizspring-business/bizspring-order/src/main/java/cn/bizspring/cloud/order/admin/controller/shop/PaymentController.java#L76-L84","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/BizSpringSource/bizspring-shop-opensource/blob/cf22d39daaf17f430d8fc1fb698a2f6e515e1808/bizspring-open/bizspring-business/bizspring-order/src/main/java/cn/bizspring/cloud/order/admin/service/impl/PaymentLogServiceImpl.java#L143-L169","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bizspring-open/BizSpring-Java-Mall","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bizspring-open/BizSpring-Java-Mall/blob/369e88c5cda36ddcea56742c335ee1bfe50e8156/bizspring-java/bizspring-business/bizspring-order/src/main/java/cn/bizspring/cloud/order/admin/controller/shop/PaymentController.java#L76-L84","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/bizspring-java-mall-payment-forgery-order-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/bizspring-shop-test-pay-endpoint-order-settlement-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/bizspring-shop-through-commit-cf22d39daaf1-payment-bypass-via-test-post-pay-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/bizspring-shop-test-pay-endpoint-order-settlement-bypass","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110608","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110608 — BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerabilit…","description":"BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that allows authenticated members to act on other members' orders by supplying their orderId. Attackers can cancel victims' pending orders to relea…","indicators":{"cves":["CVE-2026-110608"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:12.613Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/BizSpringSource/bizspring-shop-opensource","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/BizSpringSource/bizspring-shop-opensource/blob/cf22d39daaf17f430d8fc1fb698a2f6e515e1808/bizspring-open/bizspring-business/bizspring-order/src/main/java/cn/bizspring/cloud/order/admin/controller/shop/OrderController.java#L111-L145","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bizspring-open/BizSpring-Java-Mall","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bizspring-open/BizSpring-Java-Mall/blob/369e88c5cda36ddcea56742c335ee1bfe50e8156/bizspring-java/bizspring-business/bizspring-order/src/main/java/cn/bizspring/cloud/order/admin/controller/shop/OrderController.java#L111-L145","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/bizspring-java-mall-payment-forgery-order-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/bizspring-shop-through-commit-cf22d39daaf1-idor-via-member-order-cancel-and-receive","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110609","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110609 — Dromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authe…","description":"Dromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authenticated low-privileged users to inject SQL via the keyword parameter in the queryErpOrderItem MyBatis statement using raw ${} substitution. Attackers can send crafted keyword values to the queryWareh…","indicators":{"cves":["CVE-2026-110609"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:12.760Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/dromara/skyeye","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dromara/skyeye/blob/65d3ddcede701d33ea5416e47c9b656e47d56401/skyeye-erp/erp-pro/src/main/java/com/skyeye/controller/StatisticsController.java#L33-L45","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dromara/skyeye/blob/65d3ddcede701d33ea5416e47c9b656e47d56401/skyeye-erp/erp-pro/src/main/resources/mapper/erp/StatisticsMapper.xml#L29-L31","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/skyeye-erp-statistics-keyword-sqli","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/dromara-skyeye-through-commit-65d3ddcede70-sql-injection-via-keyword-parameter","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/skyeye-erp-statistics-keyword-sqli","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110610","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110610 — ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-modu…","description":"ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenticated users to make the server fetch arbitrary URLs by supplying referImageUrl to the midjourney imagine endpoint. Attackers can force Hutool HttpUtil.downloadB…","indicators":{"cves":["CVE-2026-110610"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:12.900Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/YunaiV/ruoyi-vue-pro/blob/1697112f1164b206aeb031493980f5cb3a6e2cd5/yudao-module-ai/src/main/java/cn/iocoder/yudao/module/ai/controller/admin/image/AiImageController.java#L97-L102","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/YunaiV/ruoyi-vue-pro/blob/1697112f1164b206aeb031493980f5cb3a6e2cd5/yudao-module-ai/src/main/java/cn/iocoder/yudao/module/ai/service/image/AiImageServiceImpl.java#L231","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/yudao-ai-image-midjourney-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ruoyi-vue-pro-through-2026.09-ssrf-via-midjourney-referimageurl-and-notify-imageurl","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110611","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110611 — REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 end…","description":"REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or chat-stream-sto…","indicators":{"cves":["CVE-2026-110611"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:13.053Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/getrebuild/rebuild/blob/48c6cc42f9c331cc57c057fa9c66d6cbda990131/src/main/java/com/rebuild/core/aibot2/ChatManager.java#L99-L101","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/getrebuild/rebuild/blob/48c6cc42f9c331cc57c057fa9c66d6cbda990131/src/main/java/com/rebuild/web/aibot/AiBot2Controller.java#L151-L203","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/getrebuild-rebuild-aibot-chat-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rebuild-through-4.5.0-authorization-bypass-via-aibot2-chat-endpoints-chatid","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/getrebuild-rebuild-aibot-chat-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110613","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110613 — youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authen…","description":"youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders via the app order list endpoint. Attackers can page through the oms_order table using a self-registered account to read order ids, order_sn values, memb…","indicators":{"cves":["CVE-2026-110613"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:13.327Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/youlaitech/youlai-mall","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/youlaitech/youlai-mall/blob/9f62de811d478b3ab6b27438efd58e2c4fdb4c31/mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java#L33-L38","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/youlaitech/youlai-mall/blob/9f62de811d478b3ab6b27438efd58e2c4fdb4c31/mall-oms/oms-boot/src/main/resources/mapper/OmsOrderMapper.xml#L15-L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/youlai-mall-order-list-cross-member-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/youlai-mall-through-commit-9f62de8-order-information-disclosure-via-app-order-list","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110614","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110614 — Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support…","description":"Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request parameter. Attackers can reach any generic list route of controllers extending BaseQueryController or BaseQueryRestful to…","indicators":{"cves":["CVE-2026-110614"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:13.463Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/Yiuman/citrus","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Yiuman/citrus/blob/0.15.0/citrus-support/src/main/java/com/github/yiuman/citrus/support/crud/query/QueryHelper.java#L123-L129","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/citrus-generic-query-orderby-sqli","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/yiuman-citrus-through-0.15.0-order-by-sql-injection-via-sortby-parameter","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/citrus-generic-query-orderby-sqli","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110617","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110617 — we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/expor…","description":"we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated attackers to download export archives because its authentication dependency is commented out. Attackers can supply an mp_id and guessable timestamp-base…","indicators":{"cves":["CVE-2026-110617"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:13.910Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/rachelos/we-mp-rss","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rachelos/we-mp-rss/blob/v1.5.3/apis/tools.py#L321-L376","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SyP4L62oGl","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/we-mp-rss-through-1.5.3-missing-authorization-via-export-file-download-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SyP4L62oGl","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110619","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110619 — frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticate…","description":"frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frpc a…","indicators":{"cves":["CVE-2026-110619"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:14.200Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/fatedier/frp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/fatedier/frp/blob/v0.71.1/pkg/util/http/server.go#L124-L130","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/fatedier/frp/blob/v0.71.1/server/api_router.go#L27-L32","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HyZWPT3jfe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/frp-0.41.0-through-0.71.1-missing-authentication-for-pprof-debug-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HyZWPT3jfe","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110620","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110620 — Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetS…","description":"Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify resource ownership against the supplied organizationId. Authenticated owners or managers of any organization can pair their own organization ide…","indicators":{"cves":["CVE-2026-110620"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:14.357Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/formbricks/formbricks/blob/4.8.7/apps/web/app/(app)/environments/%5BenvironmentId%5D/surveys/%5BsurveyId%5D/(analysis)/summary/actions.ts#L65-L95","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/formbricks/formbricks/blob/4.8.7/apps/web/modules/organization/settings/teams/actions.ts#L33-L50","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/formbricks/formbricks/commit/c7faa29437ea706eae411958b260bb5ad5c60e4f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/formbricks/formbricks/issues/7326","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/formbricks/formbricks/releases/tag/4.9.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/formbricks-before-4.9.0-cross-organization-idor-in-server-actions-via-organizationid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110625","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110625 — ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_ar…","description":"ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter. Attackers can send crafted flagged_item.php?type= links to logged-in administrators or moderators to execute injected script in the admin pane…","indicators":{"cves":["CVE-2026-110625","CVE-2026-110626","CVE-2026-110627"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:15.110Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/MacWarrior/clipbucket-v5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/MacWarrior/clipbucket-v5/blob/01990c0fa7baf925d2a4cf6ec1b75b1341b7a486/upload/admin_area/flagged_item.php#L9-L45","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/MacWarrior/clipbucket-v5/blob/01990c0fa7baf925d2a4cf6ec1b75b1341b7a486/upload/admin_area/styles/cb_2014/layout/flagged_item.html#L3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/MacWarrior/clipbucket-v5/commit/fc593252a18ddea76f82f316bb0c60bd7653d9ae","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/BJR_lh2ifg","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/clipbucket-v5-through-5.5.3-206-reflected-xss-via-type-parameter-in-flagged-item-php","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/MacWarrior/clipbucket-v5/blob/01990c0fa7baf925d2a4cf6ec1b75b1341b7a486/upload/admin_area/language_settings.php#L32-L37","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/MacWarrior/clipbucket-v5/blob/01990c0fa7baf925d2a4cf6ec1b75b1341b7a486/upload/admin_area/styles/cb_2014/layout/blocks/language_edit.html#L40","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/MacWarrior/clipbucket-v5/commit/0c1b5878a6135950d8a516975c4585e3b7c8790d","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/clipbucket-v5-through-5.5.3-206-reflected-xss-via-edit-language-in-language-settings-php","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/MacWarrior/clipbucket-v5/blob/01990c0fa7baf925d2a4cf6ec1b75b1341b7a486/upload/admin_area/index.php#L16-L25","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/MacWarrior/clipbucket-v5/commit/b251858e06ba2895a845497fb2e84fcd083f6f63","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/clipbucket-v5-through-5.5.3-206-reflected-xss-via-add-todo-val-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110629","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110629 — VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows aut…","description":"VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded Activi…","indicators":{"cves":["CVE-2026-110629"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:15.700Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/venturedrake/laravel-crm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/routes.php#L573-L581","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Deals/DealIndex.php#L125-L170","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/commit/049fc966029234a6d0f02b69efeabdb16e35bbb0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/commit/1a280cb22fc006f63fb96fe540dc4d651a8fb0a8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/commit/78dbf4e41afe48def4037c69d5dd7a34820122c3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/commit/cc41264eff5563f470984b8d2cfcc9ab4583c586","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/issues/79","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/issues/80","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-missing-authorization-via-livewire-actions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110630","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110630 — VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user mana…","description":"VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via Role::find. Attackers with user-management access can assign the Owner role or other teams' roles and delete cross-team…","indicators":{"cves":["CVE-2026-110630"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:15.843Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/venturedrake/laravel-crm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Http/Controllers/UserController.php#L87-L94","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/blob/fee88f9f95f18302a49e739298885b455beb02e5/src/Livewire/Users/UserIndex.php#L83-L90","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/commit/27bd5081004913660ccb3e0181b351a2e4ded104","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/commit/d64b59fb9f7355e1be9951fbcc5f54ed715dc212","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/issues/79","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/venturedrake/laravel-crm/releases/tag/2.4.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/venturedrake-laravel-crm-before-2.4.0-privilege-escalation-via-unscoped-role-assignment","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-25946","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-25946 — When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requ…","description":"When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses. An unauthenticated remote attacker can cause the server to contact loopback or private-network HTTP services. This can expos…","indicators":{"cves":["CVE-2026-25946"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:19.393Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/go-gitea/gitea/pull/36729","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-9574-292w-9wmw","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-59766","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-59766 — Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permiss…","description":"Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated with the requesting user. A user whose access to a private repository has been revoked can still retrieve repository metadata through /api/v1/user/starred and pri…","indicators":{"cves":["CVE-2026-59766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:20.577Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/go-gitea/gitea/pull/38324","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-qf2f-qh6p-7v89","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-60010","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-60010 — Gitea's repository-side team-link API allows a repository administrator who is not an organization o…","description":"Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changing t…","indicators":{"cves":["CVE-2026-60010"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:20.897Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39046","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39058","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-g5jj-gp8w-73h7","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-60018","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-60018 — Gitea's OneDev migration downloader reads the entire remote version response into memory without a s…","description":"Gitea's OneDev migration downloader reads the entire remote version response into memory without a size limit and uses a client without a timeout. An authenticated user who can start a repository migration can direct it to an attacker-controlled OneDev-compatible server returning an oversized or nev…","indicators":{"cves":["CVE-2026-60018"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.020Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39024","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39033","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-46px-6cqx-c5fv","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-60021","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-60021 — Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not at…","description":"Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can start migrations can target an attacker-controlled server that keeps the response open indefinitely. The request continues…","indicators":{"cves":["CVE-2026-60021"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.120Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39023","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39035","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-5952-x23q-p23f","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-62925","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-62925 — Gitea parses Alpine package uploads before enforcing package-size quotas and does not bound the deco…","description":"Gitea parses Alpine package uploads before enforcing package-size quotas and does not bound the decompressed .PKGINFO data or its dependency and provides entry counts. An authenticated user with package-publish permission can upload a small, highly compressed archive that causes disproportionately l…","indicators":{"cves":["CVE-2026-62925"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.230Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39026","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39029","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-36q5-5423-vgx2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63021","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63021 — Gitea's Swift package parser limits each manifest to 128 KiB but does not limit the number of manife…","description":"Gitea's Swift package parser limits each manifest to 128 KiB but does not limit the number of manifests or their aggregate size before reading them into memory. An authenticated user with package-publish permission can upload a highly compressed archive containing many manifests, causing allocations…","indicators":{"cves":["CVE-2026-63021"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.330Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39025","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39032","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-fqxf-w92m-prvq","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63792","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63792 — Gitea's collaborative-owner authorization path for reading cross-repository reusable workflows does…","description":"Gitea's collaborative-owner authorization path for reading cross-repository reusable workflows does not exclude fork pull request runs. An approved fork workflow targeting a private repository can read workflow files from another private repository that trusts the base repository's owner through col…","indicators":{"cves":["CVE-2026-63792"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.430Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39005","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39018","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-2xph-7j4g-43rg","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-66849","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-66849 — Gitea's package registry grants authenticated users read access to packages owned by Limited-visibil…","description":"Gitea's package registry grants authenticated users read access to packages owned by Limited-visibility users without excluding restricted accounts. A restricted user can enumerate and download those packages despite the visibility policy that should prevent this access. The issue affects user-owned…","indicators":{"cves":["CVE-2026-66849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.547Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39043","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39058","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-px3q-x2mm-55wg","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-66853","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-66853 — Gitea's user organization-list API includes Limited-visibility organizations for authenticated restr…","description":"Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restriction enforced by the single-organization endpoint. A restricted user can list a known user's public organization memberships and retrieve limited…","indicators":{"cves":["CVE-2026-66853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.653Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39047","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39058","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-w4wc-g858-3672","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-66874","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-66874 — For pull request events, Gitea reads workflow definitions from the pull request head and posts a syn…","description":"For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution. A fork pull request author can supply a workflow matching a required status context but deliberately prevent it from runni…","indicators":{"cves":["CVE-2026-66874"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.760Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39005","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39018","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-5xp7-r6cr-39ff","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-67577","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-67577 — Gitea's activity-feed and contribution-heatmap API handlers do not apply the profile visibility chec…","description":"Gitea's activity-feed and contribution-heatmap API handlers do not apply the profile visibility check for restricted accounts viewing Limited-visibility users. A restricted user can retrieve activity records and contribution timestamps that the corresponding profile routes deny. Exposed activity can…","indicators":{"cves":["CVE-2026-67577"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:21.963Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39004","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39039","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-rfm6-r2x5-cg56","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-68957","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-68957 — Gitea's API and web issue-search paths do not treat restricted accounts as anonymous viewers when ev…","description":"Gitea's API and web issue-search paths do not treat restricted accounts as anonymous viewers when evaluating Limited-visibility repository owners. A restricted user can search and retrieve issue titles and bodies that should be hidden by the owner's visibility policy. Keyword matching can also revea…","indicators":{"cves":["CVE-2026-68957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.063Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39004","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39039","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-wg93-gp4m-c6vr","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-68964","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-68964 — Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their w…","description":"Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents. A restricted account can retrieve public keys, key titles, fingerprints, and GPG-embedded email addresses belonging to Limited-visibility users. The disclosure concerns public key mate…","indicators":{"cves":["CVE-2026-68964"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.160Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39004","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39039","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-wwmh-7r9x-fg49","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70396","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70396 — Gitea's organization repository-creation API requires write:organization but omits the write:reposit…","description":"Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes. A personal access token or OAuth application token without repository-write scope can therefore create organization-owned repositories if…","indicators":{"cves":["CVE-2026-70396"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.257Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39007","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39014","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-hxhc-246f-rvqc","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70400","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70400 — Gitea's repository migration API accepts a public-only token when the request specifies creation of…","description":"Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository. A delegated token intended to operate only on public resources can create a private repository and migration task under the authorizing account or an organization where that user…","indicators":{"cves":["CVE-2026-70400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.363Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39007","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39014","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-x58h-3mx5-q44r","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70402","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70402 — Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process…","description":"Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask such as 0000 or 0002, another local user who can reach the repository storage may modify a hook or add an executable to a writable hook directory. A l…","indicators":{"cves":["CVE-2026-70402"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.467Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39008","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39016","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-pq8x-xpgp-rvmh","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70406","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70406 — Gitea's shared comparison helper omits the token repository-access check used when updating pull req…","description":"Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or pull request creation through a public base repository and retrieve commit history and diffs from a private head reposit…","indicators":{"cves":["CVE-2026-70406"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.570Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39006","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39013","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-m78w-jjjx-gp8r","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-70407","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-70407 — Gitea's organization-list API does not enforce the read:organization token scope. A token limited to…","description":"Gitea's organization-list API does not enforce the read:organization token scope. A token limited to another category, such as read:misc, can retrieve organization metadata visible to its owner. For a site administrator's token, the response can include Limited and private organizations, bypassing t…","indicators":{"cves":["CVE-2026-70407"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.677Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39041","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39058","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-ww9q-7j5q-hrv5","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-71301","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-71301 — Gitea's repository markup endpoint resolves same-repository pull request references without enforcin…","description":"Gitea's repository markup endpoint resolves same-repository pull request references without enforcing the viewer's Pull Requests permission. A member with only Wiki access to a private repository can submit a markup preview request and retrieve a private pull request's title and state icon despite l…","indicators":{"cves":["CVE-2026-71301"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:22.887Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39045","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39054","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-5w72-2mqm-qh46","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73126","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73126 — Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-…","description":"Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the request. A token lacking read:repository, or restricted to public repositories, can retrieve the latest workflow status of a private repository accessi…","indicators":{"cves":["CVE-2026-73126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:23.083Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39044","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39058","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-r96c-jc75-rxv6","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73130","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73130 — Gitea does not limit the length of the gitignores field accepted by repository-creation forms and th…","description":"Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. An attacker who can create repositories can subm…","indicators":{"cves":["CVE-2026-73130"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:23.190Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39027","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39040","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-8r3w-5682-jrqf","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73135","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73135 — Gitea uses inconsistent repository visibility predicates, and the condition used by some repository-…","description":"Gitea uses inconsistent repository visibility predicates, and the condition used by some repository-listing endpoints admits repositories whose owners are hidden from the viewer. Those listings disclose repository metadata even though direct routes correctly deny access with a 404 response. The issu…","indicators":{"cves":["CVE-2026-73135"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:23.300Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39009","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39012","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-hch4-r2j8-xm72","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73273","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73273 — Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcin…","description":"Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with package-publish permission can submit an oversized body to a checksum endpoint despite legitimate checksum values being at most 128 bytes. This bypass…","indicators":{"cves":["CVE-2026-73273"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:23.410Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39028","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39031","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-5xcq-p92v-43rf","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-73814","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-73814 — Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repos…","description":"Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effective permissions from Admin to Owner and then perform owner-only operations, including transferring the repository to thei…","indicators":{"cves":["CVE-2026-73814"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:24.910Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.2/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38894","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38895","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-h62v-wmrr-5qjq","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78231","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78231 — When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HT…","description":"When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint during verification. An attacker controls the destination and much of the form body, allowing interaction with internal HTTP services re…","indicators":{"cves":["CVE-2026-78231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:25.533Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-8vmh-w35x-73qr","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78433","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78433 — Gitea's web attachment handler skips its cross-repository ownership check for attachments created be…","description":"Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository named in the request URL instead. An unauthenticated attacker who knows a private attachment's UUID can request it through a public r…","indicators":{"cves":["CVE-2026-78433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:25.637Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.3/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39048","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39077","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.3","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-frpv-2xgv-wxpq","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95101","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-95101 — Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module.…","description":"Description\nNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with \n\nproxy_request_buffering on directive, an unauthenticated attacker may be able to inject data in the proxied request.\n\nImpact\n\n\nThis vulnerability may allow remote attackers to…","indicators":{"cves":["CVE-2026-95101"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:27.100Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162613","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96615","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96615 — Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resou…","description":"Description\nNGINX Gateway Fabric has a vulnerability when it is configured with Gateway \n\nCustom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced \n\n authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent…","indicators":{"cves":["CVE-2026-96615"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:28.033Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162610","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97629","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97629 — Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:si…","description":"Description\nWhen NGINX Plus or NGINX Open Source is configured with ssl_session_cache \n\nshared:name:size\n\nwithout an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions \n\nin a non-dete…","indicators":{"cves":["CVE-2026-97629"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:28.600Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://my.f5.com/manage/s/article/K000162606","label":"f5sirt@f5.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100394","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100394 — Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From…","description":"Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel.go checked an owned service under servicesLock and later dereferenced pointer-valued serviceStatusToday and serviceCurr…","indicators":{"cves":["CVE-2026-100394"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:28.693Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/nezhahq/nezha/commit/c893aa57867d8a3d608e2f2f16d1594c9766cdf3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/releases/tag/v2.2.11","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/releases/tag/v2.3.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/security/advisories/GHSA-qjpp-gffx-2wm9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100404","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100404 — Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users…","description":"Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message events for public channels outside their subscriptions. A guest can trigger the issue by registering an event queue with parameters that request messages from an unsubscribed p…","indicators":{"cves":["CVE-2026-100404"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:28.860Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/zulip/zulip/commit/98659a41cb93d4ce329ea14bb0cdfb4b147500ba","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/commit/c03db8916456674df3c98614f6f0ef8cd024ef11","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/pull/39913","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/releases/tag/12.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/security/advisories/GHSA-5r8f-gq2h-fcgp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109438","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109438 — 3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory dis…","description":"3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option (-Ne) is configured. Attackers can send a client probe that fails…","indicators":{"cves":["CVE-2026-109438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:36.783Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/3proxy/3proxy/commit/206c923d6cd433bd2e7196375442650c328b8bfa","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/3proxy-uninitialized-stack-memory-disclosure-via-socks4","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110654","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110654 — libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that al…","description":"libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values in X/28/3 packets. Attackers can send a crafted Teletext stream decoded via vbi_decode with every slot set to DRCS_MODE…","indicators":{"cves":["CVE-2026-110654"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:42.070Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/zapping-vbi/zvbi","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zapping-vbi/zvbi/blob/d3a5ee9f2b047bf16cd1ee5ccf6ec05ee75409d0/src/packet.c#L447","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/zvbi-teletext-drcs-mode-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libzvbi-through-0.2.45-out-of-bounds-write-via-teletext-drcs-convert-drcs","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110658","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110658 — Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse()…","description":"Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body lengt…","indicators":{"cves":["CVE-2026-110658"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:42.640Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/freeswitch/sofia-sip","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/freeswitch/sofia-sip/blob/ad36ac8f755308e8b87f98a505e83d4e408e5cc3/libsofia-sip-ua/msg/msg_mime.c#L404","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/sofia-sip-multipart-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sofia-sip-through-1.13.18-heap-out-of-bounds-read-via-msg-multipart-parse","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110659","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110659 — ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor…","description":"ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh_link index. Attackers can supply a crafted ELF file whose SHT_REL or SHT_RELA section has a dangling sh_link, causing find…","indicators":{"cves":["CVE-2026-110659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:42.780Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/serge1/ELFIO","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/serge1/ELFIO/blob/8ae6cec5d60495822ecd57d736f66149da9b1830/elfio/elfio_relocation.hpp#L142","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/elfio-relocation-get-entry-null-deref","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/elfio-through-3.12-null-pointer-dereference-via-relocation-section-accessor-get-entry","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110712","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110712 — libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info th…","description":"libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers controlling the server or performing man-in-the-middle on unsigned sessions can return crafted FileAl…","indicators":{"cves":["CVE-2026-110712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:43.193Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/sahlberg/libsmb2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sahlberg/libsmb2/blob/d67e213a5c4e7e4969fd81f0b95e4ca5831fbba1/lib/smb2-data-file-info.c#L202","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sahlberg/libsmb2/commit/57bee9fb941a39307145b82e4dd1718862f30a74","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libsmb2-query-info-reply-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libsmb2-through-6.2-heap-out-of-bounds-read-via-smb2-decode-file-all-info","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110713","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110713 — libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_i…","description":"libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that allows malicious SMB servers to read past reply buffers. Attackers controlling a server or intercepting unsigned sessions can send crafted QUERY_INFO re…","indicators":{"cves":["CVE-2026-110713"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:43.337Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/sahlberg/libsmb2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sahlberg/libsmb2/blob/d67e213a5c4e7e4969fd81f0b95e4ca5831fbba1/lib/smb2-data-filesystem-info.c#L71","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sahlberg/libsmb2/commit/dd0bbdee24bb56f7ec95431afc07ce0a666533f7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libsmb2-query-info-reply-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libsmb2-through-6.2-heap-out-of-bounds-read-via-file-system-info-decoders","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110714","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110714 — libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious…","description":"libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted security descriptors. Attackers controlling a server or intercepting unsigned sessions can send an AclSize below 8 in a QUERY_INFO reply, by…","indicators":{"cves":["CVE-2026-110714"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:43.473Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/sahlberg/libsmb2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sahlberg/libsmb2/blob/d67e213a5c4e7e4969fd81f0b95e4ca5831fbba1/lib/smb2-data-security-descriptor.c#L266","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sahlberg/libsmb2/commit/523abe20be3207011a936db47f1d3bab79c05450","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libsmb2-query-info-reply-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libsmb2-through-6.2-heap-out-of-bounds-read-via-decode-acl-integer-underflow","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110715","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110715 — MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototyp…","description":"MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's length. Attackers can supply JavaScript that enlarges a dense array's length and calls sort, causing Ap_sort_cmp and Ap_sor…","indicators":{"cves":["CVE-2026-110715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:43.610Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://codeberg.org/ccxvii/mujs","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://codeberg.org/ccxvii/mujs/commit/32064e10caa45e68fc87331ca53d042049cc9396","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://codeberg.org/ccxvii/mujs/src/commit/307f18c4216420f2f56e22d8e7040baa39a6304a/jsarray.c#L245","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/mujs-array-length-flat-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://mujs.com/downloads/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/mujs-1.3.6-before-1.3.9-heap-out-of-bounds-read-write-via-array-prototype-sort","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110716","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110716 — unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table()…","description":"unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range file_table_offset or large file counts…","indicators":{"cves":["CVE-2026-110716"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:43.767Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/twogood/unshield","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/twogood/unshield/blob/51de441ba6893f11026d4671ccef9e8e2a4634fa/lib/libunshield.c#L195","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/unshield-header-filetable-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/unshield-through-1.6.2-heap-out-of-bounds-read-via-unshield-get-file-table","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110717","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110717 — Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin…","description":"Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordings_path via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending in…","indicators":{"cves":["CVE-2026-110717"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:43.903Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/meetecho/janus-gateway","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/meetecho/janus-gateway/blob/1f0b75cac1c9ad819ee4c2a905a2c65b00b82cde/src/plugins/janus_recordplay.c#L1965","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/meetecho/janus-gateway/blob/1f0b75cac1c9ad819ee4c2a905a2c65b00b82cde/src/record.c#L218","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HkEaF-piGl","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/janus-webrtc-server-through-1.4.3-path-traversal-via-record-play-filename","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110718","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110718 — TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allo…","description":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata addresses that bypass the loose isValidUrl() che…","indicators":{"cves":["CVE-2026-110718"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:44.047Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/TurboDocx/html-to-docx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/TurboDocx/html-to-docx/blob/ff08e5687a2c87bcdc182a2e3e130c3493b9fb7e/src/utils/image.js#L286","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/H1t1Bbpjfx","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/turbodocx-html-to-docx-through-1.23.1-ssrf-via-img-src-remote-image-download","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-62858","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-62858 — YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_requ…","description":"YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without sanitization, after which yourls_sanitize_url() and yourls_esc_url() preserved dot and slash traversal sequences before an attacker-controlled keyword reached…","indicators":{"cves":["CVE-2026-62858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:47.617Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/YOURLS/YOURLS/commit/4e85972160a96e03a419a442d5bd8f21f2f02ddb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/YOURLS/YOURLS/pull/4142","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/YOURLS/YOURLS/releases/tag/1.10.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/YOURLS/YOURLS/security/advisories/GHSA-f8ff-652m-j5rx","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/YOURLS/YOURLS/security/advisories/GHSA-f8ff-652m-j5rx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-76113","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76113 — Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive…","description":"Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading t…","indicators":{"cves":["CVE-2026-76113"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:53.497Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000515444/dsa-2026-434-security-update-for-dell-terraform-provider-for-dell-server-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86561","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86561 — A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost…","description":"A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption.","indicators":{"cves":["CVE-2026-86561"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:54.613Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86561","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529666","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93683","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93683 — A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the ho…","description":"A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an out-of-r…","indicators":{"cves":["CVE-2026-93683"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:57.227Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-93683","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2537015","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101934","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101934 — An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved all…","description":"An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service.","indicators":{"cves":["CVE-2026-101934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:45.763Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"},{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101936","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101936 — A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series…","description":"A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces.","indicators":{"cves":["CVE-2026-101936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:45.933Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101937","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101937 — A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on th…","description":"A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traffic.","indicators":{"cves":["CVE-2026-101937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:46.087Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101938","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101938 — An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS a…","description":"An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session.","indicators":{"cves":["CVE-2026-101938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:46.233Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112186","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101968","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101968 — An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Juniper Networks Junos…","description":"An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Juniper Networks Junos OS on EX Series and MX Series, and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause heap memory disclosure and multicast join-state injection via a malformed Rosen-…","indicators":{"cves":["CVE-2026-101968"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:49.243Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101969","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101969 — An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos…","description":"An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a malformed PIM Hello message received on an IPv6-enabled PIM interface.","indicators":{"cves":["CVE-2026-101969"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:49.407Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101970","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101970 — A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and…","description":"A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to crash the routing daemon via specific PIM messages when sparse mode PIM is configured.","indicators":{"cves":["CVE-2026-101970"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:49.577Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101971","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101971 — An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol d…","description":"An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service and heap memory corruption via OSPFv3 messages on an enabled…","indicators":{"cves":["CVE-2026-101971"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:49.740Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101974","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101974 — An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos…","description":"An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packets.","indicators":{"cves":["CVE-2026-101974"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:50.037Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101985","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101985 — A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (r…","description":"A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated IS-IS peer to cause a denial of service.","indicators":{"cves":["CVE-2026-101985","CVE-2026-102066"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:50.807Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"},{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101987","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101987 — An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of J…","description":"An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.","indicators":{"cves":["CVE-2026-101987"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:51.110Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101992","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101992 — An Improper Input Validation vulnerability in the routing protocol daemon (rpd) process of Juniper N…","description":"An Improper Input Validation vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP peer to cause an rpd crash via a BGP VPLS signaling update.","indicators":{"cves":["CVE-2026-101992"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:51.900Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101995","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101995 — An Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper Networks…","description":"An Improper Validation of Specified Quantity in Input vulnerability in the \n\nl2ald \n\nof Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets.","indicators":{"cves":["CVE-2026-101995"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:52.403Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101996","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101996 — A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Ev…","description":"A Reachable Assertion vulnerability in the \n\nl2ald \n\ndaemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP allows an adjacent attacker to cause a denial of service via an inconsistent ICCP peer message.","indicators":{"cves":["CVE-2026-101996","CVE-2026-102034"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:52.580Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101999","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101999 — A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO al…","description":"A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message.","indicators":{"cves":["CVE-2026-101999","CVE-2026-102000","CVE-2026-102011"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:52.893Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102013","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102013 — A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Ju…","description":"A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message.","indicators":{"cves":["CVE-2026-102013"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:53.533Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102017","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102017 — An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Ev…","description":"An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled.","indicators":{"cves":["CVE-2026-102017"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:54.340Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102018","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102018 — A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos O…","description":"A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message.","indicators":{"cves":["CVE-2026-102018","CVE-2026-102039"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:54.527Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102032","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102032 — A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper N…","description":"A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via crafted packets when the static MAC-IP feature is in use.","indicators":{"cves":["CVE-2026-102032"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:56.770Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"},{"url":"https://www.juniper.net/documentation/us/en/software/junos/evpn/topics/concept/static-mac-ip.html","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102033","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102033 — An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Jun…","description":"An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP MC-LAG message.","indicators":{"cves":["CVE-2026-102033"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:57.020Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102035","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102035 — A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS E…","description":"A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP peer message when MC-LAG IRB MAC synchronization is enabled.","indicators":{"cves":["CVE-2026-102035"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:57.547Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102041","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102041 — A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos…","description":"A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated network attacker to cause a denial of service via malformed RSVP signaling when RSVP is enabled.","indicators":{"cves":["CVE-2026-102041"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:58.333Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102045","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102045 — An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolv…","description":"An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port.","indicators":{"cves":["CVE-2026-102045"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:58.953Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102047","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102047 — An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Net…","description":"An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent to a…","indicators":{"cves":["CVE-2026-102047"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:59.237Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102048","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102048 — An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Junipe…","description":"An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The issue is triggered when the FNP feature is enable…","indicators":{"cves":["CVE-2026-102048"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:59.397Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102051","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102051 — An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of J…","description":"An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast rec…","indicators":{"cves":["CVE-2026-102051"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:59.943Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102053","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102053 — An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of J…","description":"An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming ro…","indicators":{"cves":["CVE-2026-102053"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:00.273Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102054","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102054 — An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Ju…","description":"An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.","indicators":{"cves":["CVE-2026-102054"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:00.433Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102058","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102058 — A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evo…","description":"A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic.","indicators":{"cves":["CVE-2026-102058"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:01.090Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102060","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102060 — A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Serie…","description":"A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause a denial of service via an IGMPv3 membership report received on a directly connected network.","indicators":{"cves":["CVE-2026-102060"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:01.417Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102072","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102072 — An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of…","description":"An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.","indicators":{"cves":["CVE-2026-102072"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:03.253Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112188","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102078","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102078 — A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on…","description":"A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\n\n\nWhen web filtering for TCP traffic is configured, a high volume of DNS requests increases the likel…","indicators":{"cves":["CVE-2026-102078"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:03.400Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112181","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102080","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102080 — An Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper…","description":"An Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service (DoS).\n\n\n\nIf a SyncE or PTP upstream node sends a malformed message to an MX device e…","indicators":{"cves":["CVE-2026-102080"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:03.703Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112178","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102082","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102082 — An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks…","description":"An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS).\n\n\n\nThis issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS…","indicators":{"cves":["CVE-2026-102082"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:04.010Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112176","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102083","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102083 — An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX…","description":"An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).\n\n\n\nWhen UTM WebFiltering is configured and the WebFiltering cloud server is unreachable, sustained HTTP tr…","indicators":{"cves":["CVE-2026-102083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:04.160Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112174","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102085","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102085 — An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Netw…","description":"An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device.\n\nDue to a wrong initialization, a process which…","indicators":{"cves":["CVE-2026-102085"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:04.477Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112171","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102086","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102086 — A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Serie…","description":"A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS).\n\n\n\nWhen multiple DNS queries are received in a single flow session, where one query matches a Security…","indicators":{"cves":["CVE-2026-102086"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:04.637Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112170","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102087","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102087 — An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Junipe…","description":"An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).\n\nWhen in a BGP traffic engineering scenario a specific, valid, optional, non-t…","indicators":{"cves":["CVE-2026-102087"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:04.800Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112168","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-75083","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-75083 — The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_…","description":"The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LENGTH in a uint8_t, where len is the frame length reported by the radio. The interrupt handler kw41z_isr() obtained that length from th…","indicators":{"cves":["CVE-2026-75083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:19:10.307Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/51d71864578c08eb1a1201f87b46ec81c8609d62","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2pwx-gg6f-535f","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-75084","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-75084 — The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio…","description":"The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and validates it in verify_rxfifo_validity() (drivers/ieee802154/ieee802154_cc1200.c). That validation only enforced a lower bound (pkt_len < 3); its second clause re…","indicators":{"cves":["CVE-2026-75084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:19:10.457Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/26a8b8294bf28523c7aa2f15cf728517980ee593","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-pgg5-wwxw-vmj8","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-75085","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-75085 — The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet le…","description":"The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len = rx_frame->length - IEEE802154_FCS_LENGTH without first checking that the radio-reported length could hold an FCS. pkt_len is a uint8_t, so a reported length of 0…","indicators":{"cves":["CVE-2026-75085"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:19:10.607Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/46f8af4f5ee472abc13b0291c44fdfe4ed879aaa","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w7pm-4r95-c9vr","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93635","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93635 — LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated at…","description":"LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and lazy provisioning, this creates a password oracle for external directory users. Authenticated S/MIME lo…","indicators":{"cves":["CVE-2026-93635"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:21.297Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101959","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101959 — A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protoc…","description":"A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically malformed LSP-ping.","indicators":{"cves":["CVE-2026-101959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:11.440Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103975","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103975 — Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDr…","description":"Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extraction accepts an archive entry that creates a symbolic link to a location outside the extraction directory and then accepts a later regular-file…","indicators":{"cves":["CVE-2026-103975"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:21.397Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/appium/appium/commit/d9eb36f413153e28b04b92d8ce4447da270371c0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/appium/appium/pull/22436","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/appium/appium/releases/tag/@appium/support@7.2.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/appium/appium/security/advisories/GHSA-qfxx-c367-67f8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107348","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107348 — Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.2…","description":"Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow,…","indicators":{"cves":["CVE-2026-107348"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:25.430Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://www.pgbouncer.org/changelog.html","label":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108151","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108151 — Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta…","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.","indicators":{"cves":["CVE-2026-108151"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:27.013Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/wp-meta-data-filter-and-taxonomy-filter/vulnerability/wordpress-mdtf-plugin-1-3-9-arbitrary-code-execution-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110777","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110777 — A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH…","description":"A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify whethe…","indicators":{"cves":["CVE-2026-110777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:36.490Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-110777","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552693","label":"secalert@redhat.com","domainType":"other"},{"url":"https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/672","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86566","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86566 — A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length i…","description":"A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as OVS-DPDK.","indicators":{"cves":["CVE-2026-86566"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:18.203Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86566","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529684","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86845","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86845 — A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session po…","description":"A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, leading to use-after-free or type confusion in the host vhost-crypto backend.","indicators":{"cves":["CVE-2026-86845"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:18.677Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86845","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529844","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86846","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86846 — A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index t…","description":"A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host vhost-crypto backend.","indicators":{"cves":["CVE-2026-86846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:18.863Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86846","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529846","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86847","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86847 — A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialize…","description":"A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.","indicators":{"cves":["CVE-2026-86847"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:19.040Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86847","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529847","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86849","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86849 — A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missin…","description":"A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend.","indicators":{"cves":["CVE-2026-86849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:19.400Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86849","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529858","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86856","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86856 — A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair c…","description":"A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption.","indicators":{"cves":["CVE-2026-86856"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:19:19.580Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-86856","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529897","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102354","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102354 — BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloud…","description":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl,…","indicators":{"cves":["CVE-2026-102354"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["transport"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:04.877Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/alam00000/bentopdf/commit/45496fcd2ed6e02dcdde0d3839cc5024c091760c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/alam00000/bentopdf/commit/58cd1a8893bfe06e4a59a72adc2e7db00a8b9266","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/alam00000/bentopdf/releases/tag/v2.8.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/alam00000/bentopdf/security/advisories/GHSA-wh78-rcw2-hhg9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102682","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102682 — Pipecat is an open-source Python framework for building real-time voice and multimodal conversationa…","description":"Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in development runner exposes unauthenticated endpoints including /start, /daily, and /daily-dialin-webhook that can create bot sessio…","indicators":{"cves":["CVE-2026-102682"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:05.550Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/pipecat-ai/pipecat/commit/acaac3e49f50968f3ffb645a42ecc48d71c4e723","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pipecat-ai/pipecat/pull/5060","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pipecat-ai/pipecat/releases/tag/v1.6.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-hqm2-cfx2-2vgh","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103974","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103974 — lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d…","description":"lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d378fe20f80d4c790c6fdee54c4, a user who can add a chapter to a study can place attacker-controlled text in the PGN Annotator tag, which becomes Comment.Author.External and is returned verbatim by autho…","indicators":{"cves":["CVE-2026-103974"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:07.843Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/lichess-org/lila/commit/c54596c9e1569d378fe20f80d4c790c6fdee54c4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/lichess-org/lila/security/advisories/GHSA-43g7-r6hp-ccf8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/lichess-org/lila/security/advisories/GHSA-43g7-r6hp-ccf8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110248","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110248 — Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMake…","description":"Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because t…","indicators":{"cves":["CVE-2026-110248"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:10.343Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-134-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-g6w4-jvgp-68x2","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"},{"url":"https://pypi.org/project/sagemaker/2.257.3/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://pypi.org/project/sagemaker/3.10.0/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110666","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110666 — A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the fi…","description":"A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue rep…","indicators":{"cves":["CVE-2026-110666"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:11.377Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cemtan/sar2html/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/cemtan/sar2html/issues/18","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110666","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003748","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419826","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419826/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110763","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110763 — lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerabi…","description":"lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoint that skips URI permission checks. Authenticated low-privilege users can iterate sequential employeeId values to read every employee's depa…","indicators":{"cves":["CVE-2026-110763"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:12.037Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/zuihou/lamp-boot","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zuihou/lamp-boot/blob/ddef8c71de970b915ba1b15e0e9c2dd7414074de/lamp-oauth/lamp-oauth-controller/src/main/java/top/tangyh/lamp/oauth/controller/UserInfoController.java#L167","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/lamp-boot-finddeptbycompany-employee-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/lamp-boot-4.16.0-java17-through-4.21.2-java17-idor-via-anyone-finddeptbycompany","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110764","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110764 — AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-s…","description":"AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since Fi…","indicators":{"cves":["CVE-2026-110764"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:12.173Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/iflytek/astron-rpa","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/iflytek/astron-rpa/blob/b66e7c9e445906583c161bc9925432d6d39ca001/backend/resource-service/src/main/java/com/iflytek/rpa/resource/file/dao/FileMapper.java#L18","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/iflytek-astron-rpa-file-download-cross-tenant-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/astronrpa-through-1.1.6-cross-tenant-file-disclosure-via-file-download","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110765","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110765 — FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook…","description":"FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment ID can replay forged payment notifications to repeatedly add p…","indicators":{"cves":["CVE-2026-110765"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:12.313Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/flexprice/flexprice","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/flexprice/flexprice/blob/f27da32f84ee34bad4bf39a8d887af87fc3f30fc/internal/api/v1/webhook.go#L750","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/flexprice-quickbooks-webhook-signature-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/flexprice-through-2.1.38-quickbooks-webhook-signature-verification-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110766","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110766 — Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated user…","description":"Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avatars/:avatarId to escape the avatars direc…","indicators":{"cves":["CVE-2026-110766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:12.460Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/colanode/colanode","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/colanode/colanode/blob/d649523637f0f059c936418488165d4a689da27c/apps/server/src/api/client/routes/avatars/avatar-download.ts#L23","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/colanode/colanode/blob/d649523637f0f059c936418488165d4a689da27c/apps/server/src/lib/storage/fs.ts#L38","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/colanode-avatar-download-path-traversal","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/colanode-server-through-0.4.7-path-traversal-via-avatar-download-route","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110768","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110768 — holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Tele…","description":"holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent, wh…","indicators":{"cves":["CVE-2026-110768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:12.763Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/holaboss-ai/holaOS","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/holaboss-ai/holaOS/blob/4684714ee133794cdbb86630e42b7d93447fb2e2/runtime/channel-gateway/src/connectors/telegram.ts#L491","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/holaos-channel-gateway-allow-all-sender-default","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/holaos-through-2026.822.1-authorization-bypass-via-telegram-connector-username-allowlist","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110771","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110771 — Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated cust…","description":"Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field. Attackers can send crafted requests to POST /api/v1/auth/products/{id}/reviews to publish reviews and ratings attributed to ot…","indicators":{"cves":["CVE-2026-110771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:13.210Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/shopizer-ecommerce/shopizer","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shopizer-ecommerce/shopizer/blob/9a1602a664ab882b5420ff4339db45af44a48423/sm-shop/src/main/java/com/salesmanager/shop/populator/catalog/PersistableProductReviewPopulator.java#L66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shopizer-ecommerce/shopizer/issues/1112","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/shopizer-rest-product-review-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/shopizer-through-3.2.5-authorization-bypass-via-product-review-customerid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110772","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110772 — Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::Bul…","description":"Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create that allows family members to bypass account sharing permissions. Authenticated members with read_only or no share can submit arbitrary entry_ids to modify other members' tra…","indicators":{"cves":["CVE-2026-110772"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:13.353Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/we-promise/sure","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/we-promise/sure/blob/a3bb5d991f9b96e335e9212b1a6324289577f143/app/controllers/transactions/bulk_updates_controller.rb#L5-L13","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/we-promise/sure/issues/2099","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/we-promise-sure-transactions-bulk-update-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sure-0.7.0-through-0.7.6-alpha.6-missing-authorization-via-transaction-bulk-update","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110773","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110773 — GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler th…","description":"GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent. Attackers with a self-registered low-privilege account can send an empty or short sear…","indicators":{"cves":["CVE-2026-110773"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:13.500Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/growchief/growchief","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/growchief/growchief/blob/abb1e37a6f5595d8d105aef5871a2eeb0c22a1dc/apps/backend/src/controllers/users.controller.ts#L98-L101","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/growchief-all-users-missing-authz-cross-tenant-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/growchief-through-0.3.0-missing-authorization-via-users-all-users-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110774","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110774 — Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allo…","description":"Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed owner check. Attackers can supply another user's stored filename, following a basename plus millisecond-timestamp patter…","indicators":{"cves":["CVE-2026-110774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:13.650Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/blinkospace/blinko","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/blinkospace/blinko/blob/178e4b3538a21823a50ac2481e653d56cb1ffa86/server/routerExpress/file/file.ts#L148","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/blinko-attachment-accountid-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/blinko-through-1.8.8-private-attachment-read-via-api-file-route","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110775","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110775 — Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows…","description":"Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users to read other tenants' knowledge-base files by skipping tenant comparison for knowledge_base/ reads. Attackers in multi-tenant deployments can list objects via GET /file/storage f…","indicators":{"cves":["CVE-2026-110775"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:13.790Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/ModelEngine-Group/nexent","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ModelEngine-Group/nexent/blob/90bf1a5dbb1eb16bb4a28c2407ed4b6eda9a09bf/backend/services/file_management_service.py#L177","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/nexent-knowledge-base-cross-tenant-file-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/nexent-through-2.7.0-cross-tenant-knowledge-base-file-read-via-check-file-access","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55167","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55167 — LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings)…","description":"LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who…","indicators":{"cves":["CVE-2026-55167"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:17.633Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/LDAPAccountManager/lam/commit/a56dcaab3e0f572283f5861404ed58d5ea301bc6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LDAPAccountManager/lam/releases/tag/9.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-xgjg-fchx-x3g3","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-82402","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-82402 — Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, an unauthenticated attacker can…","description":"Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, an unauthenticated attacker can provide a backslash-containing target to the /redirect endpoint, and similar post-action redirect flows are also affected. internal/urlx/urlx.go IsSameSite validates a normalized form of the target w…","indicators":{"cves":["CVE-2026-82402"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:21.660Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/gogs/gogs/blob/main/CHANGELOG.md#0150dev-main","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gogs/gogs/commit/0aa820e6d572771551871c0b5f5f32dffc565e3e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gogs/gogs/pull/8391","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gogs/gogs/security/advisories/GHSA-3g28-2vwg-gxq6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gogs/gogs/security/advisories/GHSA-3g28-2vwg-gxq6","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102980","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102980 — Plane is an open-source project management tool. Prior to 1.4.0, PageVersionEndpoint in apps/api/pla…","description":"Plane is an open-source project management tool. Prior to 1.4.0, PageVersionEndpoint in apps/api/plane/app/views/page/version.py scopes page-version lookups by workspace and page identifiers but not by the project_id from the URL. ProjectPagePermission likewise derives the caller's role from the URL…","indicators":{"cves":["CVE-2026-102980"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:28.600Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/makeplane/plane/commit/cfe951c8af41b0fcf1c792e5ad664d00f77709ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/pull/9380","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/releases/tag/v1.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-ghcr-frqr-6pqr","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-ghcr-frqr-6pqr","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102985","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102985 — Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partial_…","description":"Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partial_update places its authorization checks inside the role update branch, so a guest or member can omit role and change another ProjectMember record's is_active field, including deactivating a project adm…","indicators":{"cves":["CVE-2026-102985"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:28.750Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/makeplane/plane/commit/dc9d80b2d2a499b967f0b541e083b283f463719f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/pull/9367","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/releases/tag/v1.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-25gg-cxm8-g7h9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110310","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110310 — A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by alter…","description":"A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack, the user can use a PKCS#1 v1.5 padding…","indicators":{"cves":["CVE-2026-110310"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:30.547Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-135-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://github.com/aws/amazon-s3-encryption-client-dotnet/security/advisories/GHSA-322w-f6rw-r4fj","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"},{"url":"https://www.nuget.org/packages/Amazon.Extensions.S3.Encryption/3.2.2","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://www.nuget.org/packages/Amazon.Extensions.S3.Encryption/4.0.3","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110669","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110669 — A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function delet…","description":"A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed publicly and may be used…","indicators":{"cves":["CVE-2026-110669"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:31.190Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/cemtan/sar2html/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/cemtan/sar2html/issues/21","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110669","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003769","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419829","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419829/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55679","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55679 — WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the pre-installation web/instala…","description":"WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the pre-installation web/instalador/instalador.php endpoint is reachable before config.php exists and processes unauthenticated installation POST data. In the Linux reinstall flow, a crafted usuario value reaches a command executed…","indicators":{"cves":["CVE-2026-55679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:50.030Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/b13c4b0b416d99a8145f583e0893bc8172155469","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/96","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-wm6j-4rfm-399q","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110689","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110689 — A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shou…","description":"A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The explo…","indicators":{"cves":["CVE-2026-110689"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:36.433Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/nedlir/skills-scanner-bypass","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/openclaw/clawscan/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/openclaw/clawscan/issues/39","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/openclaw/clawscan/pull/41","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/openclaw/clawscan/releases/tag/v0.1.7","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110689","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003915","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419836","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419836/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110694","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110694 — A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function…","description":"A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the component tmfile Model Loader. Such manipulation of the argument offset_root leads to out-of-bounds read. It is possible…","indicators":{"cves":["CVE-2026-110694"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:36.617Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/OAID/Tengine/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/OAID/Tengine/issues/1453","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110694","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003957","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419841","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419841/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110695","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110695 — A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get…","description":"A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be ca…","indicators":{"cves":["CVE-2026-110695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:22.697Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/3em0/cve_repo/blob/main/2026/ExLlamaV2-0.3.2-Heap-Buffer-Overflow-in-the-safetensors-tensor-loader(STFile.get_tensor-stloader_read).md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/turboderp-org/exllamav2/issues/820","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110695","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1003958","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419848","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419848/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110698","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110698 — A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_m…","description":"A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The exp…","indicators":{"cves":["CVE-2026-110698"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:23.050Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/PaulBoersma/praat/commit/a910d21a2705ef4cd16d91f29cdc8da1ab1a7221","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/praat/praat.github.io/issues/3348","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110698","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004713","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419892","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/419892/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110816","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110816 — ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to p…","description":"### Summary\n\n\n\n`qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toString` (`{ \"toString\": \"x\" }`) or a null-prototype object. The comma format joins…","indicators":{"cves":["CVE-2026-110816"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:23.230Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727","label":"7ffcee3d-2c14-4c3e-b844-86c6a321a158","domainType":"primary"},{"url":"https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw","label":"7ffcee3d-2c14-4c3e-b844-86c6a321a158","domainType":"primary"},{"url":"https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110807","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110807 — A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is…","description":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack…","indicators":{"cves":["CVE-2026-110807"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:22.390Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://gist.github.com/Yunzez/28820d220c52de4810fd5fb2d1dcf409#file-repro_sglang_session_params_crash-py","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/41467","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/pull/41535","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110807","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004351","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420278","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420278/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110829","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110829 — FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel w…","description":"FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service.","indicators":{"cves":["CVE-2026-110829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:22.597Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3mq5-xh88-9v62","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-null-pointer-dereference-via-rdpsnd-fragment","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3mq5-xh88-9v62","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110830","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110830 — FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a m…","description":"FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors. Attackers can send repeated serial IRP_MJ_CREATE requests to accumulate descriptors and terminate the client at the CommReadFile FD_SETSIZE assertion.","indicators":{"cves":["CVE-2026-110830"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:22.737Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mqxv-c882-m8w9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-before-3.32.0-denial-of-service-via-serial-irp-mj-create","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-mqxv-c882-m8w9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110831","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110831 — FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create,…","description":"FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with dr…","indicators":{"cves":["CVE-2026-110831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:22.880Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jgw9-wqvx-j495","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.13.0-before-3.32.0-resource-leak-via-drive-redirection-irp-mj-create","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110832","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110832 — FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data…","description":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a seven-byte DATA_FIRST message on an opened DVC declaring a large 32-bit length, causi…","indicators":{"cves":["CVE-2026-110832"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:23.023Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5cgr-vmp8-fmvj","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-memory-exhaustion-via-drdynvc-data-first","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110833","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110833 — FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reas…","description":"FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhaust…","indicators":{"cves":["CVE-2026-110833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:23.160Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m7g5-gw57-cwcr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-before-3.32.0-unbounded-memory-retention-via-rdpdr-proxy","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110834","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110834 — FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malic…","description":"FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRP_MJ_READ or IRP_MJ_WRITE before create or after close, causing CommReadFile or CommWriteFile to derefer…","indicators":{"cves":["CVE-2026-110834"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:23.300Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pw4j-ff39-9vjm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-denial-of-service-via-serial-irp-null-handle","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pw4j-ff39-9vjm","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110835","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110835 — FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the targe…","description":"FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by http_proxy_connect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a pro…","indicators":{"cves":["CVE-2026-110835"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:23.433Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-87v8-2gwr-ww9j","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-http-header-injection-via-proxy-routing-token","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-87v8-2gwr-ww9j","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110836","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110836 — FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() tha…","description":"FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Content-Type headers. Attackers controlling a gateway can return a nonzero Content-Length with a semicolon-containing unrecognized Content…","indicators":{"cves":["CVE-2026-110836"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:23.593Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-h7fx-22wv-4cg8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-infinite-loop-dos-via-gateway-content-type","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110855","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110855 — GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious reposi…","description":"GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separate_git_dir in Repo._clone(), which omits expand_vars=False when calling Git.polish_url(). Attackers can craft a .gitmodules submodule name containing v…","indicators":{"cves":["CVE-2026-110855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:26.623Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gitpython-before-3.2.0-environment-variable-disclosure-via-gitmodules-submodule-name","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110860","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110860 — GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which chec…","description":"GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbolic links in intermediate path components. An untrusted repository can commit a symlink such as vendor pointing outside the worktree, so an a…","indicators":{"cves":["CVE-2026-110860"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:27.340Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gitpython-3.1.62-before-3.2.0-symlink-path-traversal-via-submodule-move","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110866","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110866 — Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumRele…","description":"Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retry checkbox. Attackers who publish a malicious dependency version can have it pushed into the PR and run in CI before the…","indicators":{"cves":["CVE-2026-110866"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:28.253Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/renovatebot/renovate/security/advisories/GHSA-2frq-pm48-6j4h","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/renovate-before-44.61.3-minimumreleaseage-bypass-via-pr-rebase-request","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110870","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110870 — Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its addr…","description":"Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fails to strip RFC 5322 comments inside angle-bracket addresses. Attackers can supply recipients like a display name with a parenthesized comment in the domain, so illegal characters r…","indicators":{"cves":["CVE-2026-110870"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:28.813Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-g73g-hqqh-jr95","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nodemailer-before-10.0.13-improper-input-validation-via-angle-bracket-address-comments","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110871","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110871 — Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.par…","description":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding. Attackers can supply large recipient lists or long headers that fold into tens of thousands of continuation lines, blocki…","indicators":{"cves":["CVE-2026-110871"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:28.953Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-39m8-27wv-hr27","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nodemailer-3.0.0-before-10.0.10-quadratic-dkim-header-unfolding-denial-of-service","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110872","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110872 — Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability…","description":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse. A malicious SMTP server or on-path attacker can stream continuation lines without a completion line before authenticat…","indicators":{"cves":["CVE-2026-110872"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:29.097Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nodemailer-3.0.0-before-10.0.10-denial-of-service-via-smtp-reply-parsing","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/nodemailer/nodemailer/security/advisories/GHSA-4g23-2xm8-66gc","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110809","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110809 — A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issu…","description":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be perfo…","indicators":{"cves":["CVE-2026-110809"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T00:16:40.150Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://gist.github.com/Yunzez/dbd254603fa2bc74358cb3647423d0ec#file-repro_sglang_session_replace_crash-py","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/41470","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/pull/41483","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110809","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004356","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420279","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420279/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110904","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110904 — ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated…","description":"ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.","indicators":{"cves":["CVE-2026-110904"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:18:37.320Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-2j32-q6rx-h844","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-2j32-q6rx-h844","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-76656","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76656 — A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to ca…","description":"A\n  vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote\n  attacker to cause a denial of service when traceroute is executed under\n  certain conditions.","indicators":{"cves":["CVE-2026-76656"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T02:20:15.770Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110909","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110909 — Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP reques…","description":"Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console also…","indicators":{"cves":["CVE-2026-110909"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T03:17:10.947Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-x3cm-2j3q-jgg4","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-76662","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76662 — A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.","description":"A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.","indicators":{"cves":["CVE-2026-76662"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T03:17:11.117Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76664","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76664 — A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operati…","description":"A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations","indicators":{"cves":["CVE-2026-76664"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T04:18:26.693Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76666","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76666 — A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.","description":"A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.","indicators":{"cves":["CVE-2026-76666","CVE-2026-76667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T05:17:04.430Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110923","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110923 — A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a sla…","description":"A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a \"..\" basename that sftp uses as the local destination, writing outside the directory the user selected.","indicators":{"cves":["CVE-2026-110923"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:01.030Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:82247","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-110923","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553028","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110925","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110925 — A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a n…","description":"A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those characters are passed into the shell.","indicators":{"cves":["CVE-2026-110925"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:01.243Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:82247","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-110925","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553034","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110926","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110926 — A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share o…","description":"A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths.","indicators":{"cves":["CVE-2026-110926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:01.440Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:82247","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-110926","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553035","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15180","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15180 — The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '…","description":"The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCM_ErrorMessages' POST Parameter in all versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…","indicators":{"cves":["CVE-2026-15180"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:02.370Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3633064/tracking-code-manager/trunk/includes/classes/utils/Options.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8f7ee196-1151-4312-ac61-0bb6756850bb?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17001","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17001 — The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Sc…","description":"The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Column User Meta Profile Fields in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…","indicators":{"cves":["CVE-2026-17001"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:02.530Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3621249%40import-users-from-csv-with-meta%2Ftags%2F2.4.6&old=3620186%40import-users-from-csv-with-meta%2Ftags%2F2.4.5","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41e8e5c7-9165-45fb-ab90-ea13d2b28b7d?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-18557","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-18557 — The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Ref…","description":"The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 1.8.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate…","indicators":{"cves":["CVE-2026-18557"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:03.200Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3638213%40photo-gallery%2Ftags%2F1.8.43&old=3553858%40photo-gallery%2Ftags%2F1.8.42","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a1fb413-de45-4401-923b-b3b7bef526b4?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78001","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78001 — The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerab…","description":"The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table Designer 'data-label' Attribute in all versions up to, and including, 1.27.13 due to insufficient input sanitization and output escaping. This makes it…","indicators":{"cves":["CVE-2026-78001"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:04.623Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3674803%40post-and-page-builder%2Ftags%2F1.27.14&old=3653434%40post-and-page-builder%2Ftags%2F1.27.13","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/23049e7b-07ea-449c-963a-841a08659442?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78087","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78087 — The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'lin…","description":"The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'linkToPost' Feature in all versions up to, and including, 1.126.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level ac…","indicators":{"cves":["CVE-2026-78087"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:04.787Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3664034/vk-blocks/trunk/inc/vk-blocks/view/class-vk-blocks-link-to-post.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c76615ef-8b58-423f-aa29-d9c8a688f0fe?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86803","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86803 — The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versi…","description":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthen…","indicators":{"cves":["CVE-2026-86803"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:17:05.327Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3689650/ocean-extra/trunk/includes/panel/library-shortcode.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3863cc3a-7532-4925-9b59-909cfd45501a?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-66272","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-66272 — A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains…","description":"A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nVideo Station 5.8.5…","indicators":{"cves":["CVE-2025-66272","CVE-2025-66275","CVE-2026-34015"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:56.730Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Video%20Station&app=VideoStationPro&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101302","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101302 — TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally…","description":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.  The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional N…","indicators":{"cves":["CVE-2026-101302"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.297Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:67.ktls.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101308","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101308 — When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is no…","description":"When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.  An mmap(2) call on another thread can complete during this window, after which the resize path frees the now-mapped buffer wi…","indicators":{"cves":["CVE-2026-101308"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.007Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.freebsd.org/advisories/FreeBSD-SA-26:71.sound.asc","label":"secteam@freebsd.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103304","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103304 — The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on…","description":"The eaSYNC Booking  WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails…","indicators":{"cves":["CVE-2026-103304"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.113Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://wpscan.com/vulnerability/99069eac-aa52-41da-9d63-3fb9e2a05f4a/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103324","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103324 — The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify…","description":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark a…","indicators":{"cves":["CVE-2026-103324"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.230Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://wpscan.com/vulnerability/4e23c520-bb92-47b8-a617-0d334820db50/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104643","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104643 — The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in…","description":"The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber, to read URLs its content scanner collected from private and draft posts and from site options, and to trigger a site-w…","indicators":{"cves":["CVE-2026-104643"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.393Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://wpscan.com/vulnerability/8b75ec7a-2b37-4e77-a83a-18b5e6f71d51/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106031","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106031 — The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a leg…","description":"The Spin Wheel  WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before returning and consuming a configured prize coupon, allowing unauthenticated users to disclose and drain the stored coupon codes of any campaign, including unpublished ones.","indicators":{"cves":["CVE-2026-106031"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.507Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://wpscan.com/vulnerability/51b61b2b-6bf7-4dee-be8a-907cf5071920/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110933","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110933 — Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This i…","description":"Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.\n\nThis issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7.","indicators":{"cves":["CVE-2026-110933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.727Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/Samsung/Vyond/commit/fb10a5c8b833df7f152d4a563a61d6090a1790d7","label":"PSIRT@samsung.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110934","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110934 — Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Mani…","description":"Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.\n\nThis issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa.","indicators":{"cves":["CVE-2026-110934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.860Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/Samsung/Vyond/commit/be6e297b0c4836e20d73b2f8a40a561ea496ebaa","label":"PSIRT@samsung.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-11905","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11905 — The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to…","description":"The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.3 via the 'keys_conversion_map' parameter. This makes it possible for authenticated attackers, with contributor-level access an…","indicators":{"cves":["CVE-2026-11905"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:58.980Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/base/query.php#L106","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/classes/post-query.php#L108","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/classes/post-query.php#L62","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.0.3/modules/wp-rest/classes/post-query.php#L71","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/base/query.php#L106","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/classes/post-query.php#L108","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/classes/post-query.php#L62","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/elementor/tags/4.1.2/modules/wp-rest/classes/post-query.php#L71","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3674524%40elementor&new=3674524%40elementor","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a018a58-2184-4031-99a8-4aad55bcc815?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-24721","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-24721 — A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote att…","description":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nFile Station 5 5.5.6.…","indicators":{"cves":["CVE-2026-24721","CVE-2026-24722","CVE-2026-24723"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:59.747Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=FileStation5&app=FileStation5&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76668","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76668 — A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped…","description":"A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.","indicators":{"cves":["CVE-2026-76668"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:02.720Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92428","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92428 — The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a pa…","description":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.","indicators":{"cves":["CVE-2026-92428","CVE-2026-92429"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:03.300Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://wpscan.com/vulnerability/106c8da0-cfb5-49da-8c6d-cb56e8cbc4c2/","label":"contact@wpscan.com","domainType":"other"},{"url":"https://wpscan.com/vulnerability/62c7edfc-2d18-4be6-ba36-215e90563d03/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108092","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108092 — The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure…","description":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId paramete…","indicators":{"cves":["CVE-2026-108092"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T08:16:36.920Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L253","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L275","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L622","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b394ee3e-fc1c-40b5-b3c5-a9b5e44a7a14?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-23390","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-23390 — A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a…","description":"A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In c…","indicators":{"cves":["CVE-2025-23390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:14.190Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23390","label":"meissner@suse.de","domainType":"other"},{"url":"https://github.com/rancher/fleet/security/advisories/GHSA-xgpc-q899-67p8","label":"meissner@suse.de","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104617","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104617 — There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak th…","description":"There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.","indicators":{"cves":["CVE-2026-104617"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:16.113Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104617","label":"meissner@suse.de","domainType":"other"},{"url":"https://www.suse.com/security/cve/CVE-2026-104617.html","label":"meissner@suse.de","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104618","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104618 — On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. Th…","description":"On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.","indicators":{"cves":["CVE-2026-104618"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:16.263Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104618","label":"meissner@suse.de","domainType":"other"},{"url":"https://www.suse.com/security/cve/CVE-2026-104618.html","label":"meissner@suse.de","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79823","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79823 — HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirabl…","description":"HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.","indicators":{"cves":["CVE-2026-79823"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:18.707Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96614","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96614 — \"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom…","description":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.","indicators":{"cves":["CVE-2026-96614"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:18.833Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://apps.apple.com/jp/app/id590190880","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://jvn.jp/en/jp/JVN40460777/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://play.google.com/store/apps/details?id=jp.co.geoonline.app&hl=ja","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17525","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17525 — Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.…","description":"Incomplete cleanup vulnerability in ABB My Control System.\n\nThis issue affects My Control System: 26.4 and 26.5.","indicators":{"cves":["CVE-2026-17525"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:17:28.300Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://search.abb.com/library/Download.aspx?DocumentID=7PAA025438&LanguageCode=en&DocumentPartId=&Action=Launch","label":"cybersecurity@ch.abb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79830","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79830 — A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which c…","description":"A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.","indicators":{"cves":["CVE-2026-79830"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:17:50.083Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79831","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79831 — A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.","description":"A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.","indicators":{"cves":["CVE-2026-79831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:17:50.200Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79836","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79836 — A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corrupt…","description":"A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash,  DoS or information disclosure.","indicators":{"cves":["CVE-2026-79836"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:16:39.800Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-8145","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-8145 — The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress i…","description":"The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 3.0.8 via the 'process_registration' due to missing validation on the 'wholesalex_registration_role' parameter. This…","indicators":{"cves":["CVE-2026-8145"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:16:39.923Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wholesalex/tags/2.3.7/includes/menu/class-wholesalex-registration.php#L1327","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wholesalex/trunk/includes/menu/class-wholesalex-registration.php#L1327","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3529605/","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3703929/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d3b9464c-dcc4-4ae8-816f-1572f84dfe08?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102389","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102389 — Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Chec…","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1.","indicators":{"cves":["CVE-2026-102389"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:10.470Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/broken-link-checker/vulnerability/wordpress-broken-link-checker-plugin-2-4-14-1-content-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106147","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106147 — In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListB…","description":"In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item template renders the bound dataTextField value as raw HTML without encoding. An attacker who can modify the bound data can supply HTML containing event handlers that execute JavaScript…","indicators":{"cves":["CVE-2026-106147"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.120Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-listbox-bound-text-xss-cve-2026-106147","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106148","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106148 — In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components…","description":"In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components insert data source imageUrl values into single-quoted image src attributes without proper escaping. An attacker who can modify an image URL can inject additional HTML attributes, including event handl…","indicators":{"cves":["CVE-2026-106148"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.243Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-tabstrip-menu-panelbar-image-url-xss-cve-2026-106148","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106157","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106157 — In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the Pa…","description":"In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the PanelBar component inserts data source item URL values into a single-quoted href attribute without proper encoding. An attacker who can control an item URL can inject additional HTML attributes, includi…","indicators":{"cves":["CVE-2026-106157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.367Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-panelbar-url-xss-cve-2026-106157","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106158","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106158 — In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, a…","description":"In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, and Agenda views insert resource color values into quoted event wrapper attributes without proper encoding. An attacker who can control a resource color can inject additional HTML attributes, including…","indicators":{"cves":["CVE-2026-106158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.483Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-scheduler-resource-color-xss-cve-2026-106158","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106159","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106159 — In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolB…","description":"In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup button URLs are concatenated into an unquoted href attribute after URL sanitization. An attacker who can control a button URL can supply an otherwise allowed HTTPS URL containing whites…","indicators":{"cves":["CVE-2026-106159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.603Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-toolbar-buttongroup-url-xss-cve-2026-106159","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106160","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106160 — In Progress® Kendo® UI for jQuery prior to 2026.3.1015, Model.accept passes server-response keys to…","description":"In Progress® Kendo® UI for jQuery prior to 2026.3.1015, Model.accept passes server-response keys to kendo.setter without guarding against unsafe object paths containing __proto__, constructor, or prototype. An attacker who can supply data accepted by an affected model can modify object prototype att…","indicators":{"cves":["CVE-2026-106160"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.727Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-model-accept-prototype-pollution-cve-2026-106160","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106161","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106161 — In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the B…","description":"In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw HTML without encoding, including values supplied through text binding. An attacker who can modify data bound to a Badge can supply HTML containing event h…","indicators":{"cves":["CVE-2026-106161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.843Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-badge-text-xss-cve-2026-106161","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106162","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106162 — In Progress® Kendo® UI for jQuery versions starting with 2023.3.1010 and prior to 2026.3.1015, the F…","description":"In Progress® Kendo® UI for jQuery versions starting with 2023.3.1010 and prior to 2026.3.1015, the FileManager component renders remotely supplied item names as HTML in its default drag hint even though the corresponding list items are encoded. An attacker who can control an item name can inject HTM…","indicators":{"cves":["CVE-2026-106162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:14.963Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-filemanager-drag-hint-xss-cve-2026-106162","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106163","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106163 — In Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior to v2026.3.1015, the…","description":"In Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior to v2026.3.1015, the FileBrowser and ImageBrowser components render remotely supplied file and directory names as HTML without proper encoding. An attacker-controlled name containing script-related HTML can execute JavaSc…","indicators":{"cves":["CVE-2026-106163"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:15.083Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-filebrowser-imagebrowser-xss-cve-2026-106163","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110924","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110924 — A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave d…","description":"A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A later successful login on that connection is not authorized by the leftover state.","indicators":{"cves":["CVE-2026-110924"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:22.387Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-110924","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553033","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110927","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110927 — A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past t…","description":"A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.","indicators":{"cves":["CVE-2026-110927"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:22.760Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:82247","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-110927","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553037","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106149","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106149 — In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attribut…","description":"In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string concatenation without proper neutralization. An attacker with low privileges who can control these fields can inject JavaScript event-handler attributes that…","indicators":{"cves":["CVE-2026-106149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:21.843Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-menu-xss-cve-2026-106149","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106150","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106150 — In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting…","description":"In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting with version 2011.2.804 and the Tooltip component starting with version 2013.1.319 construct iframe markup without properly sanitizing URL values or encoding the Window iframe title. An attacker with…","indicators":{"cves":["CVE-2026-106150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:22.010Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-cross-site-scripting-splitter-window-tooltip-cve-2026-106150","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106151","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106151 — In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Va…","description":"In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Validator decodes validation messages from data-msg-* attributes and parses the resulting text as HTML. An attacker who can modify a validation message can cause HTML that was correctly escaped in the p…","indicators":{"cves":["CVE-2026-106151"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:22.157Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-validator-message-xss-cve-2026-106151","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106153","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106153 — In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar m…","description":"In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url and data.title without proper URL sanitization and HTML attribute encoding. An attacker with low privileges who can control the URL option or culture-derived tit…","indicators":{"cves":["CVE-2026-106153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:22.307Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-calendar-month-template-xss-cve-2026-106153","label":"security@progress.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110936","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110936 — A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affect…","description":"A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the applicati…","indicators":{"cves":["CVE-2026-110936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:30.383Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-580366.html","label":"productcert@siemens.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-46694","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-46694 — EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a portal use…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a portal user with stream access to a parent record can directly fetch a Note through the portal Note API and read an internal stream note when the note identifier is known. Stream list responses correctly hide n…","indicators":{"cves":["CVE-2026-46694"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:34.610Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/ee039bd22da9b6f5b768f31e7acece36596befb2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-cg9f-34hj-p238","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-46708","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-46708 — EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a low-privil…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a low-privileged user who can access a shared TargetList can invoke opt-out or cancel-opt-out actions for a protected Contact or Lead that the user cannot read or edit. The service validates access to the target…","indicators":{"cves":["CVE-2026-46708"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:34.760Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/5be59190cb683d8ac50a76e96a01aa6f51b4973a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-mqp6-23xq-7q3r","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55154","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55154 — EspoCRM is an open source customer relationship management application. Prior to 9.3.9, application/…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.9, application/Espo/Tools/Export/Format/Csv/Processor.php, application/Espo/Tools/Export/Format/Xlsx/OpenSpoutProcessor.php, and application/Espo/Tools/Export/Format/Xlsx/PhpSpreadsheetProcessor.php inspect only the…","indicators":{"cves":["CVE-2026-55154"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:35.620Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/f209248efd0d63bc8f7906cb96c07020a758eead","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-xrwp-2gph-985x","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-59994","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-59994 — EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an unauthent…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an unauthenticated remote attacker can send an email to a monitored group or IMAP address, including an email-to-Case address, and place arbitrary HTML in its plain-text body. EspoCRM stores that body and renders…","indicators":{"cves":["CVE-2026-59994"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:36.180Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/f9fd47622df04617728643b4b8f1a22563cbc6e7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-3rh4-9hcq-g79m","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63130","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-63130 — EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenti…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manager. Insufficient path validation allows traversal outside the intended directory and permits reading, modifying, creating…","indicators":{"cves":["CVE-2026-63130"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:36.333Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/31540a04ca8ea96519c7dbf2d8d2273218e69ce6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.10","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-jr5q-25fw-27f8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77460","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77460 — EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with…","description":"EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is disabl…","indicators":{"cves":["CVE-2026-77460"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:36.900Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/b3309f8b2060e77b377f672a30358a30b61f3111","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/10.0.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-28w2-h88g-6vgv","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-79841","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79841 — A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory writ…","description":"A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption.","indicators":{"cves":["CVE-2026-79841"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:37.923Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79843","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-79843 — A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, po…","description":"A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption.","indicators":{"cves":["CVE-2026-79843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:38.040Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95180","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-95180 — An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sens…","description":"An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient","indicators":{"cves":["CVE-2026-95180"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:38.930Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/FFG0d/security-advisories/blob/main/advisories/CVE-2026-95180.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Justson/AgentWeb/blob/androidx/agentweb-core/src/main/java/com/just/agentweb/DefaultWebClient.java","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Justson/AgentWeb/blob/androidx/releasenote.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Justson/AgentWeb/commit/9efb1519","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/Justson/AgentWeb/releases","label":"cve@mitre.org","domainType":"primary"},{"url":"https://jitpack.io/com/github/Justson/AgentWeb/agentweb-core/maven-metadata.xml","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100347","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100347 — kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationH…","description":"kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canonical HTTP method for an existing static path to openapi3.PathItem.GetOperation. The default branch of GetOperation panics…","indicators":{"cves":["CVE-2026-100347"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:30.287Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/f1a5b523b82868d2d9be2e116b4e942892be72c3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.145.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-fh4f-47mf-f2gj","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-fh4f-47mf-f2gj","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100348","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100348 — kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can derefe…","description":"kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referential additionalProperties JSON Reference such as a schema that points to its own additionalProperties member. Loading an attacker-controlled O…","indicators":{"cves":["CVE-2026-100348"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:30.477Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/88aa64c7cbd03ecadbb419c473bdcaa8b0124c6b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.145.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-mh7x-f8wq-4jhx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100350","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100350 — kin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter r…","description":"kin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter repeatedly calls regexp.MustCompile for the same parameter-name regular expression inside the per-query-key loop in urlValuesDecoder.DecodeObject used to decode a deepObject query parameter. An unauthe…","indicators":{"cves":["CVE-2026-100350"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:30.793Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/d090e36b2f1c42c898ba2a687a8f6e25f5ca727f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-h4r5-mxv5-8mjc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-h4r5-mxv5-8mjc","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111092","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111092 — In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed…","description":"In JetBrains YouTrack before 2026.2.19575\n2026.3.16075\n2026.3.16397\n2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands","indicators":{"cves":["CVE-2026-111092"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:48.767Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","label":"cve@jetbrains.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111096","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111096 — In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was pos…","description":"In JetBrains TeamCity before 2026.2, \n2026.1.4, \n2025.11.8 stored XSS in the classic build log was possible","indicators":{"cves":["CVE-2026-111096"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:49.217Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","label":"cve@jetbrains.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58391","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-58391 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filter_rule.volt and nat_rule.volt without quote-safe encoding. The response layer uses ENT_NOQUOTES, so…","indicators":{"cves":["CVE-2026-58391"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:18.030Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/5e6313f50546474031805039e209830b63b2b0e4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/fb3b8a07f407ce281b1dde748706acbb0bc514ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-2xrm-p255-p43h","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://hackerask.com/posts/opnsense","label":"security-advisories@github.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58392","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-58392 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS pag…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in base64 form, applies legacy_html_escape_form_data() to the encoded string, and then uses base64_decode() to decode the value directly into the GPS initi…","indicators":{"cves":["CVE-2026-58392"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:18.167Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/a92d9514b5436c868f8f97138ebed507f6de423c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/ed04a154dc40967541be1388e9134e451be4199e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-h793-67jm-j4m5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://hackerask.com/posts/opnsense","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-h793-67jm-j4m5","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-58393","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-58393 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Cli…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common_name field accepts path traversal sequences and openvpn_csc_conf_write() concatenates the value into /var/etc/openvpn-csc/<vpnid>/<common_name> without normalization or a…","indicators":{"cves":["CVE-2026-58393"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:18.310Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/3af496143a19153c18b2f9458b2510d58aff2b98","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/6101b3e2c90482111f420a47775c14a447441a72","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-2m9v-p7r9-gfcw","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-2m9v-p7r9-gfcw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-58394","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-58394 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_advanced_admin.php reads certificate records into $a_cert but omits that array from legacy_html_escape_form_data() before rendering each certificate descr value in the SSL Certificate selector. The ce…","indicators":{"cves":["CVE-2026-58394"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:18.447Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/9d0a590e9c49f4374a5539929b366123f63bc9eb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/adcb02f8f68071e636bf9660b2cb8d0229f34674","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-8pgr-x852-qx4j","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://hackerask.com/posts/opnsense","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-8pgr-x852-qx4j","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-58395","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-58395 — OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete…","description":"OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase() interpolates an unvalidated safe-delete token from the request URL into an XPath expression over config.xml before confirming that the to…","indicators":{"cves":["CVE-2026-58395"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:18.583Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/opnsense/core/commit/631e14721b311badc1d3c0d29321e4d42585156b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/commit/d7054cef69f72588feac1091254960835be19dfe","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-98h6-479q-9q3w","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://hackerask.com/posts/opnsense","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-98h6-479q-9q3w","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78850","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78850 — An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteCon…","description":"An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component","indicators":{"cves":["CVE-2026-78850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:28.513Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/SLO-CYBER-SEC/CVE-2026-78850","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/matomo-org/matomo","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/matomo-org/matomo/security/advisories","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/matomo-org/matomo/tree/5.11.2","label":"cve@mitre.org","domainType":"primary"},{"url":"https://matomo.org/","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/SLO-CYBER-SEC/CVE-2026-78850","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78851","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78851 — Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain…","description":"Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.","indicators":{"cves":["CVE-2026-78851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:28.640Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/SLO-CYBER-SEC/CVE-2026-78851","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/getgrav/grav","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/getgrav/grav/blob/2.0.6/system/config/security.yaml#L325","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/getgrav/grav/blob/2.0.6/system/src/Grav/Common/Twig/Extension/GravExtension.php#L1629","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/SLO-CYBER-SEC/CVE-2026-78851","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102740","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102740 — The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously pro…","description":"The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path $java.io.tmpdir/ahc/ResumableAsyncHandler.prop…","indicators":{"cves":["CVE-2026-102740"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:21.613Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/AsyncHttpClient/async-http-client/commit/0422e11c954c4b026e986d1458f7a7a2eab7e591","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/AsyncHttpClient/async-http-client/commit/d945ce3357b093e74526871cd309832a717ecfda","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/AsyncHttpClient/async-http-client/pull/2281","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-2.16.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-3.0.12","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cf59-3jcr-vfhw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103350","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103350 — Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rent…","description":"Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Rental Manager: from n/a through 2.8.0.","indicators":{"cves":["CVE-2026-103350"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:21.773Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/booking-and-rental-manager-for-woocommerce/vulnerability/wordpress-booking-and-rental-manager-plugin-2-8-0-other-vulnerability-type-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104266","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104266 — tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file con…","description":"tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero inside a ---- atom can cause the metadata parser to stop advancing through the input. The custom-field atom traversal repeatedly processes the malformed location…","indicators":{"cves":["CVE-2026-104266"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:22.983Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/tinytag/tinytag/commit/9ada221ba44990cb02cd9002d992186e037b515e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/tinytag/tinytag/pull/326","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/tinytag/tinytag/releases/tag/2.3.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/tinytag/tinytag/security/advisories/GHSA-24cc-9352-h2pg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106706","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106706 — XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code e…","description":"XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor. JobCodeController.save() stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped.","indicators":{"cves":["CVE-2026-106706"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:23.567Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106706.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/xuxueli/xxl-job","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106707","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106707 — XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log l…","description":"XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog). An authenticated user who holds permission on a target executor job group can inject arbitrary JavaScript via the executorParam argument of the manual-trigger endpoint POST /jobinf…","indicators":{"cves":["CVE-2026-106707"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:23.840Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106707.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/xuxueli/xxl-job","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110367","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110367 — Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows…","description":"Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.","indicators":{"cves":["CVE-2026-110367"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:25.743Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/woosquare/vulnerability/wordpress-apiexperts-square-for-woocommerce-plugin-4-7-5-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110371","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110371 — Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Explo…","description":"Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.","indicators":{"cves":["CVE-2026-110371","CVE-2026-109897"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:25.880Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/strong-testimonials/vulnerability/wordpress-strong-testimonials-plugin-3-3-12-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"},{"url":"https://patchstack.com/database/wordpress/plugin/strong-testimonials/vulnerability/wordpress-strong-testimonials-plugin-3-3-12-broken-access-control-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110381","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110381 — Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointme…","description":"Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.","indicators":{"cves":["CVE-2026-110381"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:26.023Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/simply-schedule-appointments/vulnerability/wordpress-simply-schedule-appointments-plugin-1-6-12-35-insecure-direct-object-references-idor-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110888","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110888 — Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly C…","description":"Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3.","indicators":{"cves":["CVE-2026-110888"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:26.180Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/ai-engine/vulnerability/wordpress-ai-engine-plugin-3-8-3-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110891","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110891 — Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly…","description":"Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through 3.54.15.","indicators":{"cves":["CVE-2026-110891"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:26.473Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/wordlift/vulnerability/wordpress-wordlift-plugin-3-54-15-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-54683","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-54683 — NL Portal Backend Libraries provide backend components for Dutch government portals that interact wi…","description":"NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. Prior to 3.0.3, both the getDocumentContent GraphQL query and GET /api/documentapi/{documentapi}/document/{documentId}/content REST route…","indicators":{"cves":["CVE-2026-54683","CVE-2026-55414"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:27.003Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/commit/6e738a876ff9f581991b5b070706100b5516e183","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/commit/e326e6db862f71f76dd46d3b17cbb5fa6f2fba02","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/pull/684","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/pull/690","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/releases/tag/3.0.3.RELEASE","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/security/advisories/GHSA-jr45-52cw-69h5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/commit/5ea04ef6445443e22e40a23fbed447e618b70c3f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/pull/700","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/releases/tag/3.0.4.RELEASE","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nl-portal/nl-portal-backend-libraries/security/advisories/GHSA-xm3x-9cfw-jhx4","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55453","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55453 — OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.…","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quote_string() function preserves carriage-return and line-feed characters in a remote printer-controlled marker-message before report_attr() writes the value to th…","indicators":{"cves":["CVE-2026-55453","CVE-2026-55467","CVE-2026-55480","CVE-2026-61702"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:27.677Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/OpenPrinting/cups/commit/806e1b483096c51d59432468f4afdd7387d81dd7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/commit/d41cf0616688721e9d435d54118c4c8a36ed596a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/releases/tag/v2.4.20","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-7hqf-mfhx-7r3v","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/commit/0cf4e7814d6810ed3c454222bce3aa342d541681","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/commit/a9e7e7a3a019d0fa063d29409d3f82e4c6d5a008","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/commit/98adfd855950e806508f961d5438ad32e26aac62","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/commit/f6a11dae0f0f3b748fbca931e237be03ffe8e48e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-jj94-x3qh-ffp9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/commit/08a8a277ce2a8948a1af33552247a1ac53b72df3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/commit/6650428234616a97d3298e0e2d4419c62c1339d2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5g","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55875","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55875 — Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, a…","description":"Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validate_url to check only URL syntax before passing…","indicators":{"cves":["CVE-2026-55875"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:28.130Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/HeliumEdu/platform/commit/f0de5c985c701942758b805a3d11dfb008a6af88","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/HeliumEdu/platform/security/advisories/GHSA-2f83-94pv-v3f5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/HeliumEdu/platform/security/advisories/GHSA-2f83-94pv-v3f5","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103083","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103083 — Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Adva…","description":"Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…","indicators":{"cves":["CVE-2026-103083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:13.590Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/elex-bulk-edit-products-prices-attributes-for-woocommerce-basic/vulnerability/wordpress-elex-woocommerce-advanced-bulk-edit-products-prices-attributes-plugin-1-5-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106701","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106701 — ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServe…","description":"ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.","indicators":{"cves":["CVE-2026-106701"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:18.950Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/elunez/eladmin","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/tao0845/CVE-Request/blob/main/CVE-2026-106701.md","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108499","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108499 — Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Inc…","description":"Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base: from n/a through 3.2.0.","indicators":{"cves":["CVE-2026-108499"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:20.330Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/knowledgebase/vulnerability/wordpress-knowledge-base-plugin-3-2-0-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109131","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109131 — The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (buil…","description":"The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from upstream ansible-ui, frontend/hub) renders a documentation URL part (formatPartURL in DocumentationParsers.tsx) as a link without restricting the URL protocol/scheme. A collection whose documen…","indicators":{"cves":["CVE-2026-109131"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:20.717Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109131","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549510","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109689","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109689 — Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Ex…","description":"Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4.","indicators":{"cves":["CVE-2026-109689"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:21.373Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/sunshine-photo-cart/vulnerability/wordpress-sunshine-photo-cart-plugin-3-7-4-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109841","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109841 — undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.…","description":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its ASCII-…","indicators":{"cves":["CVE-2026-109841","CVE-2026-87029"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:21.640Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-f72v-6w45-q472","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-55wc-3pg8-jfw6","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109924","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109924 — undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0…","description":"undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its EventSource client can be driven to exhaust process memory by a malicious or compromised Server-Sent Events peer. By sending millions of tiny completed data fields with…","indicators":{"cves":["CVE-2026-109924"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:22.180Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109932","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109932 — undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.…","description":"undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSocket client, including the bundled WebSocket exposed by Node.js, can be driven to exhaust process memory by a malicious or compromised WebSocket server. For every…","indicators":{"cves":["CVE-2026-109932"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:22.300Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110360","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110360 — Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting…","description":"Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Search Lite: from n/a through 4.14.5.","indicators":{"cves":["CVE-2026-110360"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:22.433Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/ajax-search-lite/vulnerability/wordpress-ajax-search-lite-plugin-4-14-5-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110361","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110361 — Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-…","description":"Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects Infinite Uploads: from n/a through 3.4.1.","indicators":{"cves":["CVE-2026-110361"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:22.557Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/infinite-uploads/vulnerability/wordpress-infinite-uploads-plugin-3-4-1-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110362","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110362 — Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payme…","description":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.","indicators":{"cves":["CVE-2026-110362"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:22.687Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/planetstudio-payment-gateway/vulnerability/wordpress-planetstudio-payment-gateway-plugin-1-3-3-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110364","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110364 — Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for…","description":"Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement Pr…","indicators":{"cves":["CVE-2026-110364"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:22.817Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/flexible-quantity-measurement-price-calculator-for-woocommerce/vulnerability/wordpress-flexible-quantity-measurement-price-calculator-for-woocommerce-plugin-2-3-23-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110374","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110374 — Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number…","description":"Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77.","indicators":{"cves":["CVE-2026-110374"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:23.150Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/login-with-phone-number/vulnerability/wordpress-login-with-phone-number-plugin-1-8-77-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110378","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110378 — Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-si…","description":"Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ninja Forms Signature Contract Add-On: from n/a through 3.2.5.","indicators":{"cves":["CVE-2026-110378"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:23.433Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/ninja-signature-contract-forms-add-on/vulnerability/wordpress-ninja-forms-signature-contract-add-on-plugin-3-2-5-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110874","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110874 — Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in funct…","description":"Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which calls unserialize() without class restrictions when json_decode() fails. Attackers able to write stored extrafields, export configurations or blocked log entries can plant serializ…","indicators":{"cves":["CVE-2026-110874"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:24.353Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/Dolibarr/dolibarr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Dolibarr/dolibarr/commit/17658fcaefdaabe13685e566e5f12d5fbd4f4a5c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Dolibarr/dolibarr/pull/38530","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/dolibarr-before-23.0.4-php-object-injection-via-jsonorunserialize","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110875","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110875 — AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that…","description":"AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory corrup…","indicators":{"cves":["CVE-2026-110875"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:24.530Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/adplug/adplug","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/adplug/adplug/blob/e491e382479ed2246f124c96c70d94561dce59b9/src/ksm.cpp#L99-L229","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/adplug/adplug/issues/292","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/adplug/adplug/pull/295","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/adplug-ksm-note-loop-databuf-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/adplug-through-2.4-heap-buffer-overflow-via-cksmplayer-update-in-ksm-cpp","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110876","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110876 — AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers…","description":"AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read during…","indicators":{"cves":["CVE-2026-110876"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:24.687Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/adplug/adplug","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/adplug/adplug/blob/e491e382479ed2246f124c96c70d94561dce59b9/src/xsm.cpp#L86-L134","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/adplug-ksm-note-loop-databuf-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/adplug-through-2.4-out-of-bounds-read-via-cxsmplayer-play-note-in-xsm-files","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110877","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110877 — AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo…","description":"AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncated TwinTeam DMO file. Attackers can supply a 12- or 13-byte file passing dmo_unpacker::decrypt(), opened via CAdPlug::fa…","indicators":{"cves":["CVE-2026-110877"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:24.823Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/adplug/adplug","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/adplug/adplug/blob/e491e382479ed2246f124c96c70d94561dce59b9/src/dmo.cpp#L56-L78","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/adplug-ksm-note-loop-databuf-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/adplug-through-2.4-heap-out-of-bounds-read-via-cdmoloader-load","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110878","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110878 — Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authentica…","description":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts via unescaped Operation Type and Location names in RuleForm.php and RuleInfolist.php. Attackers can store HTML/JavaScript payloads in names that execute when warehouse mana…","indicators":{"cves":["CVE-2026-110878"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:24.967Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/aureuserp/aureuserp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/blob/b33fa04643a936885f83b5ad39a62260ef27a7a0/plugins/webkul/inventories/src/Filament/Clusters/Configurations/Resources/RuleResource/Schemas/RuleForm.php#L121-L153","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/blob/b33fa04643a936885f83b5ad39a62260ef27a7a0/plugins/webkul/inventories/src/Filament/Clusters/Configurations/Resources/RuleResource/Schemas/RuleInfolist.php#L24-L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/pull/1619","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/Bk4Vpz0ife","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aureus-erp-through-1.6.0-stored-xss-via-inventory-rule-action-information","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111123","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111123 — FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corr…","description":"FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulator destination values. Attackers can craft an SF2 file with PMOD/IMOD destinations of 63 to 255 that, when loaded and played, write…","indicators":{"cves":["CVE-2026-111123"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:25.460Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/FluidSynth/fluidsynth","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/FluidSynth/fluidsynth/blob/71e85b2ca6bf48641ba7e2261d8f2640ae473773/src/sfloader/fluid_defsfont.c#L1609-L1611","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/FluidSynth/fluidsynth/blob/71e85b2ca6bf48641ba7e2261d8f2640ae473773/src/synth/fluid_voice.c#L1184-L1229","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/FluidSynth/fluidsynth/blob/71e85b2ca6bf48641ba7e2261d8f2640ae473773/src/synth/fluid_voice.c#L615-L623","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/fluidsynth-sf2-modulator-dest-generator-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fluidsynth-through-2.6.1-out-of-bounds-write-via-soundfont-modulator-destination","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/fluidsynth-sf2-modulator-dest-generator-oob-write","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111124","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111124 — CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unq…","description":"CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_rand_value table via a zero or negative ZDITHER0 seed. Attackers can supply a crafted FITS file with a SUBTRACTIVE_DITHER_1 compres…","indicators":{"cves":["CVE-2026-111124"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:25.627Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/HEASARC/cfitsio","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/HEASARC/cfitsio/blob/d6d27653740864a0483e74cff23c53e34e1dceee/imcompress.c#L5353-L5362","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/HEASARC/cfitsio/blob/d6d27653740864a0483e74cff23c53e34e1dceee/imcompress.c#L7495-L7516","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/cfitsio-zdither0-dither-seed-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cfitsio-through-4.7.0-heap-out-of-bounds-read-via-negative-zdither0-seed","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111125","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111125 — CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile d…","description":"CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffer via input_nnybble in fits_hdecompress.c. Attackers can supply a crafted FITS file with ZCMPTYPE HCOMPRESS_1 declaring oversized til…","indicators":{"cves":["CVE-2026-111125"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:25.780Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/HEASARC/cfitsio","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/HEASARC/cfitsio/blob/d6d27653740864a0483e74cff23c53e34e1dceee/fits_hdecompress.c#L2575-L2633","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/HEASARC/cfitsio/blob/d6d27653740864a0483e74cff23c53e34e1dceee/imcompress.c#L6310-L6316","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/cfitsio-zdither0-dither-seed-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cfitsio-through-4.7.0-heap-out-of-bounds-read-via-hcompress-input-nnybble","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111126","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111126 — catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of proc…","description":"catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c…","indicators":{"cves":["CVE-2026-111126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:25.923Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/vbwagner/catdoc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vbwagner/catdoc/blob/38a2807d22ce1a08bc39b94e9072a9f8f52cd86f/src/xlsparse.c#L314-L328","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/catdoc-xls-mulrk-endcol-and-string-count-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/catdoc-through-0.95-out-of-bounds-read-in-xls2csv-mulrk-record-handler","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/catdoc-xls-mulrk-endcol-and-string-count-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111127","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111127 — catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xls…","description":"catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST recor…","indicators":{"cves":["CVE-2026-111127"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:26.073Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/vbwagner/catdoc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vbwagner/catdoc/blob/38a2807d22ce1a08bc39b94e9072a9f8f52cd86f/src/xlsparse.c#L421-L520","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/catdoc-xls-mulrk-endcol-and-string-count-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/catdoc-through-0.95-out-of-bounds-read-via-xls2csv-copy-unicode-string","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111128","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111128 — Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that a…","description":"Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById() to return…","indicators":{"cves":["CVE-2026-111128"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:26.213Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/assimp/assimp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/assimp/assimp/blob/392a658f9c271be965271f45e7521a1b80ea4392/code/AssetLib/Ogre/OgreStructs.cpp#L621-L634","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/assimp/assimp/blob/392a658f9c271be965271f45e7521a1b80ea4392/code/AssetLib/Ogre/OgreStructs.cpp#L914-L921","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/assimp-ogre-mesh-bone-submesh-null-deref","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/assimp-through-6.0.5-null-pointer-dereference-via-ogre-importer-bone-assignment","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/assimp-ogre-mesh-bone-submesh-null-deref","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111129","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111129 — Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability i…","description":"Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation tra…","indicators":{"cves":["CVE-2026-111129"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:26.370Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/assimp/assimp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/assimp/assimp/blob/392a658f9c271be965271f45e7521a1b80ea4392/code/AssetLib/Ogre/OgreBinarySerializer.cpp#L688-L704","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/assimp/assimp/blob/392a658f9c271be965271f45e7521a1b80ea4392/code/AssetLib/Ogre/OgreStructs.cpp#L839-L846","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/assimp-ogre-mesh-bone-submesh-null-deref","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/assimp-through-6.0.5-null-pointer-dereference-via-ogre-animation-track","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111130","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111130 — OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that al…","description":"OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts, cra…","indicators":{"cves":["CVE-2026-111130"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:26.517Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/openslide/openslide","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/openslide/openslide/blob/fe79a9713bef2bfd64bbfefd15704060764b1274/src/openslide-vendor-mirax.c#L1033-L1034","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/openslide/openslide/blob/fe79a9713bef2bfd64bbfefd15704060764b1274/src/openslide-vendor-mirax.c#L611-L635","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/openslide-mirax-slide-position-index-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/openslide-through-4.0.1-heap-out-of-bounds-read-via-mirax-get-tile-position","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111131","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111131 — libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard…","description":"libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl…","indicators":{"cves":["CVE-2026-111131"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:26.660Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libxmp/libxmp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libxmp/libxmp/blob/5d4f6aa2c7dcdf8e9cd8129fe579d45b36a302da/src/loaders/prowizard/p61a.c#L110-L116","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libxmp/libxmp/blob/5d4f6aa2c7dcdf8e9cd8129fe579d45b36a302da/src/loaders/prowizard/p61a.c#L638-L641","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libxmp-p61a-sample-backreference-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libxmp-through-4.7.4-stack-out-of-bounds-read-via-p61a-depacker","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libxmp-p61a-sample-backreference-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111132","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111132 — GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that…","description":"GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted…","indicators":{"cves":["CVE-2026-111132"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:26.810Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://gitlab.gnome.org/GNOME/libgxps","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.gnome.org/GNOME/libgxps/-/blob/f5027ed09c767e8a02e652fbc77dcea79e19e10d/libgxps/gxps-path.c#L776-L785","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.gnome.org/GNOME/libgxps/-/blob/f5027ed09c767e8a02e652fbc77dcea79e19e10d/libgxps/gxps-path.c#L832-L848","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libgxps-poly-segment-points-arity-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/gnome-libgxps-through-0.3.2-heap-out-of-bounds-read-via-path-geometry-start-element","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111133","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111133 — libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data()…","description":"libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via crafted KEK attributes. Attackers can supply a crafted encrypted APFS image with malformed HMAC or wrapped KEK attribute lengths to crash…","indicators":{"cves":["CVE-2026-111133"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:26.957Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libyal/libfsapfs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libfsapfs/blob/4c7c1c21f3cfc7d35f0b34b8a47f1f1562d27bbb/libfsapfs/libfsapfs_key_encrypted_key.c#L321-L333","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libfsapfs/blob/4c7c1c21f3cfc7d35f0b34b8a47f1f1562d27bbb/libfsapfs/libfsapfs_key_encrypted_key.c#L528-L540","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libfsapfs-key-encrypted-key-attribute-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libfsapfs-through-20260921-heap-out-of-bounds-read-via-libfsapfs-key-encrypted-key-read-data","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libfsapfs-key-encrypted-key-attribute-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111134","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111134 — libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_…","description":"libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() that allows attackers to read past buffer bounds via crafted MTP file entry shell items. Attackers can embed a 10 to 73 byte shell item with item data size of 44 or more in .lnk fil…","indicators":{"cves":["CVE-2026-111134"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:27.127Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libyal/libfwsi","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libfwsi/blob/2f2aba25b888f37314a39d8c3e71c0e3ced56e59/libfwsi/libfwsi_mtp_file_entry_values.c#L245-L267","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libfwsi-mtp-values-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libfwsi-through-20260522-heap-out-of-bounds-read-via-libfwsi-mtp-file-entry-values-read-data","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111135","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111135 — libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_valu…","description":"libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file, jum…","indicators":{"cves":["CVE-2026-111135"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:27.273Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libyal/libfwsi","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libfwsi/blob/2f2aba25b888f37314a39d8c3e71c0e3ced56e59/libfwsi/libfwsi_mtp_volume_values.c#L248-L273","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libfwsi-mtp-values-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libfwsi-through-20260522-heap-out-of-bounds-read-via-libfwsi-mtp-volume-values-read-data","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111136","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111136 — libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 load…","description":"libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatch_sf2_gen_is_valid() does not range-check generator IDs before the validity mask test. Attackers can supply crafted SF2 files with out-of-range pgen or igen generator IDs to write atta…","indicators":{"cves":["CVE-2026-111136"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:27.490Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/swami/libinstpatch","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/swami/libinstpatch/blob/4ff1939ccc24de204d41b3ab734fc1aece919184/libinstpatch/IpatchSF2Gen.c#L189-L205","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/swami/libinstpatch/blob/4ff1939ccc24de204d41b3ab734fc1aece919184/libinstpatch/IpatchSF2Reader.c#L1355-L1370","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/swami/libinstpatch/blob/4ff1939ccc24de204d41b3ab734fc1aece919184/libinstpatch/IpatchSF2Reader.c#L954-L969","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libinstpatch-sf2-generator-id-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libinstpatch-through-1.1.7-heap-out-of-bounds-write-via-ipatch-sf2-gen-is-valid","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libinstpatch-sf2-generator-id-oob-write","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111137","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111137 — libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib/smi.…","description":"libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex rendering of OCTET STRING values. Attackers can supply a crafted MIB with an OCTET STRING DEFVAL of 512 or more octets a…","indicators":{"cves":["CVE-2026-111137"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:27.690Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/amartin755/libsmi","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/amartin755/libsmi/blob/c58307210fe995ec419db976eb234aebc71a9216/lib/smi.c#L479-L566","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libsmi-smivalueasstring-octetstring-defval-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libsmi-through-0.5.0-out-of-bounds-write-via-smivalueasstring-octet-string-defval","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111138","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111138 — NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and…","description":"NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() because absolute-run bound checks omit the word-alignment pad byte. Attackers can supply a crafted RLE8 or RLE4 BMP ending on an odd-length absolute run to cause a one-byte heap ove…","indicators":{"cves":["CVE-2026-111138"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:27.840Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://download.netsurf-browser.org/libs/releases/libnsbmp-0.1.7-src.tar.gz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/netsurf-browser/libnsbmp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/netsurf-browser/libnsbmp/blob/ea063c9f46acb43e90208da14073332b505ef7e7/src/libnsbmp.c#L1096-L1147","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/netsurf-browser/libnsbmp/blob/ea063c9f46acb43e90208da14073332b505ef7e7/src/libnsbmp.c#L942-L982","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libnsbmp-rle-absolute-pad-and-ico-mask-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/netsurf-libnsbmp-through-0.1.7-out-of-bounds-read-in-rle8-and-rle4-decoders","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111139","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111139 — NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() tha…","description":"NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that ca…","indicators":{"cves":["CVE-2026-111139"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:27.983Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://download.netsurf-browser.org/libs/releases/libnsbmp-0.1.7-src.tar.gz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/netsurf-browser/libnsbmp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/netsurf-browser/libnsbmp/blob/ea063c9f46acb43e90208da14073332b505ef7e7/src/libnsbmp.c#L835-L873","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libnsbmp-rle-absolute-pad-and-ico-mask-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/netsurf-libnsbmp-through-0.1.7-out-of-bounds-read-via-bmp-decode-mask","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111140","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111140 — libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data()…","description":"libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data() because it bounds value data size without subtracting the 4-byte old-format cell offset. Attackers can supply a crafted version 1.0/1.1 REGF hive with a value data cell ending its hive bin to leak adj…","indicators":{"cves":["CVE-2026-111140"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:28.127Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libyal/libregf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libregf/blob/1a4bd856484263caa4a5e0d6ba377c3dc69150c7/libregf/libregf_value_item.c#L789-L935","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libregf-value-data-offset-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libregf-through-20260526-heap-out-of-bounds-read-via-libregf-value-item-read-value-data","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111141","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111141 — zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory(…","description":"zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the centr…","indicators":{"cves":["CVE-2026-111141"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:28.267Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/gdraheim/zziplib","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gdraheim/zziplib/blob/f58313c1f65f46bf73f3526d1afd4d6bb46cc4ae/zzip/zip.c#L530-L558","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/zziplib-zip-central-directory-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/zziplib-through-0.13.80-out-of-bounds-read-via-zzip-parse-root-directory-zip64-parsing","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111142","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111142 — Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows a…","description":"Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing zzip_disk_entry_strdu…","indicators":{"cves":["CVE-2026-111142"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:28.417Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/gdraheim/zziplib","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gdraheim/zziplib/blob/f58313c1f65f46bf73f3526d1afd4d6bb46cc4ae/zzip/mmapped.c#L323-L352","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gdraheim/zziplib/blob/f58313c1f65f46bf73f3526d1afd4d6bb46cc4ae/zzip/mmapped.c#L420-L497","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/zziplib-zip-central-directory-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/zziplib-through-0.13.80-out-of-bounds-read-via-zzip-disk-findfirst","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111143","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111143 — Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() i…","description":"Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input buffer…","indicators":{"cves":["CVE-2026-111143"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:28.563Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/ansilove/libansilove","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ansilove/libansilove/blob/f1b05447aa566aa4eef9b05ebf8c2aaf1e379cd3/src/loaders/xbin.c#L169-L241","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libansilove-xbin-rle-oob-read-and-null-font-deref","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ansilove-libansilove-through-1.4.2-out-of-bounds-read-via-ansilove-xbin-rle-decoding","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111144","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111144 — libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin()…","description":"libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL high_font_data_…","indicators":{"cves":["CVE-2026-111144"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:28.707Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/ansilove/libansilove","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ansilove/libansilove/blob/f1b05447aa566aa4eef9b05ebf8c2aaf1e379cd3/src/drawchar.c#L28-L35","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ansilove/libansilove/blob/f1b05447aa566aa4eef9b05ebf8c2aaf1e379cd3/src/loaders/xbin.c#L119-L166","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ansilove/libansilove/blob/f1b05447aa566aa4eef9b05ebf8c2aaf1e379cd3/src/loaders/xbin.c#L224-L232","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libansilove-xbin-rle-oob-read-and-null-font-deref","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libansilove-1.3.0-through-1.4.2-null-pointer-dereference-via-ansilove-xbin","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111145","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111145 — ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef…","description":"ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF streams. Attackers can supply a crafted winmail.dat TNEF attachment with a malicious PT_BINARY MAPI property to crash ytnefprint or libytn…","indicators":{"cves":["CVE-2026-111145"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:28.873Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/Yeraze/ytnef","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Yeraze/ytnef/blob/d9f089144414d3b0912c29ab96f8f1c591d00319/lib/ytnef.c#L1554-L1563","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Yeraze/ytnef/issues/112","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/ytnef-decompressrtf-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ytnef-through-2.1.2-heap-out-of-bounds-read-via-decompressrtf","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111146","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111146 — ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint() that allows atta…","description":"ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint() that allows attackers to read past heap allocations by supplying compressed RTF properties. Attackers can deliver a crafted winmail.dat whose decompressed RTF lacks a NUL terminator, causing printf to over-read, cras…","indicators":{"cves":["CVE-2026-111146"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:29.040Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/Yeraze/ytnef","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Yeraze/ytnef/blob/d9f089144414d3b0912c29ab96f8f1c591d00319/lib/ytnef.c#L1449-L1458","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Yeraze/ytnef/blob/d9f089144414d3b0912c29ab96f8f1c591d00319/lib/ytnef.c#L1605-L1614","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Yeraze/ytnef/issues/112","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/ytnef-decompressrtf-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ytnef-through-2.1.2-heap-out-of-bounds-read-via-mapiprint-in-lib-ytnef-c","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111147","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111147 — Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record…","description":"Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via unbounded multi-value offset tables. Attackers can supply a crafted ESE/EDB database processed by esedbexport to crash the application…","indicators":{"cves":["CVE-2026-111147"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:29.210Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libyal/libesedb","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libesedb/blob/cf49b6d420d4a44dcd6355bc0d6b36f9f580f350/libesedb/libesedb_record.c#L3776-L3830","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libesedb-multi-value-offset-table-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libyal-libesedb-through-20260704-heap-out-of-bounds-read-via-libesedb-record-get-multi-value","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111148","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111148 — libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to…","description":"libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset. Attackers can set the header data offset beyond the file size, wrapping the length calculation so resolveAddrs() reads…","indicators":{"cves":["CVE-2026-111148"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:29.353Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libsidplayfp/libsidplayfp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libsidplayfp/libsidplayfp/blob/732fa8ec8131fc75aafc2eaea583ddcdeea2a3cc/src/sidtune/SidTuneBase.cpp#L295-L300","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libsidplayfp/libsidplayfp/blob/732fa8ec8131fc75aafc2eaea583ddcdeea2a3cc/src/sidtune/SidTuneBase.cpp#L488-L500","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libsidplayfp-psid-dataoffset-underflow-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libsidplayfp-through-3.1.1-heap-out-of-bounds-read-via-sidtunebase-acceptsidtune","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111149","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111149 — FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack3…","description":"FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-controlled PixMap width. Attackers can supply a crafted PICT file with a truncated or undersized rowBytes to over-read up t…","indicators":{"cves":["CVE-2026-111149"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:29.503Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/danoli3/FreeImage","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/danoli3/FreeImage/blob/cc2bfc1b67d3a10e2c203c56932b09ffb52a4477/Source/FreeImage/PluginPICT.cpp#L605-L650","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/freeimage-pict-unpack32bits-plane-conversion-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/freeimage-through-3.19.23-heap-out-of-bounds-read-via-pict-unpack32bits","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111150","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111150 — ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PC…","description":"ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBlk t…","indicators":{"cves":["CVE-2026-111150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:29.650Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/ValleyBell/libvgm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ValleyBell/libvgm/blob/a6eed945ecf4e5a25cf82004779c6f7e4fd5c319/player/dblk_compr.c#L183-L190","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ValleyBell/libvgm/blob/a6eed945ecf4e5a25cf82004779c6f7e4fd5c319/player/dblk_compr.c#L727-L751","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libvgm-pcm-compression-table-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/valleybell-libvgm-through-commit-a6eed945-heap-out-of-bounds-read-via-decompressdatablk","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111151","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111151 — OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass d…","description":"OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt memory via one-row codeblocks. Attackers can supply a crafted .j2c or .jph codestream with small precinct sizes, causing the decoder to write a second row past…","indicators":{"cves":["CVE-2026-111151"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:29.800Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/aous72/OpenJPH","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aous72/OpenJPH/blob/23c422895ce6c3a156935222e4715ee0b7be952c/src/core/codestream/ojph_codeblock.cpp#L79-L84","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aous72/OpenJPH/blob/23c422895ce6c3a156935222e4715ee0b7be952c/src/core/codestream/ojph_subband.cpp#L136-L142","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aous72/OpenJPH/blob/23c422895ce6c3a156935222e4715ee0b7be952c/src/core/coding/ojph_block_decoder32.cpp#L1135-L1155","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/openjph-htj2k-degenerate-codeblock-cleanup-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/openjph-through-0.32.0-heap-out-of-bounds-write-in-htj2k-cleanup-pass-decoder","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111152","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111152 — Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loa…","description":"Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via gme_tr…","indicators":{"cves":["CVE-2026-111152"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:29.957Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/libgme/game-music-emu","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libgme/game-music-emu/blob/9e23d10f9fd2a6a2f33b10912dd8dc7153258995/gme/Ay_Emu.cpp#L53-L80","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libgme/game-music-emu/commit/ae10a8f05479e3c8f80429e7a59759fed06f8c13","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libgme-ay-track-table-underflow-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/game-music-emu-libgme-through-0.6.5-heap-out-of-bounds-read-via-ay-loader","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111153","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111153 — Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_…","description":"Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, op…","indicators":{"cves":["CVE-2026-111153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:30.103Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/libgme/game-music-emu","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libgme/game-music-emu/blob/9e23d10f9fd2a6a2f33b10912dd8dc7153258995/gme/Classic_Emu.cpp#L66-L80","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libgme/game-music-emu/blob/9e23d10f9fd2a6a2f33b10912dd8dc7153258995/gme/Nsf_Emu.cpp#L212-L218","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libgme/game-music-emu/issues/164","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libgme-ay-track-table-underflow-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/game-music-emu-libgme-through-0.6.5-out-of-bounds-read-via-classic-emu-mute-voices","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111154","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111154 — libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader…","description":"libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators in parse_gen. Attackers can supply a crafted .sf2 file with out-of-range pgen/igen operator values to write chosen 16-b…","indicators":{"cves":["CVE-2026-111154"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:30.243Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/sezero/libtimidity","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sezero/libtimidity/blob/a52adf6aee2635e2a16797213a089c2180e67757/src/sndfont.c#L468-L480","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libtimidity-soundfont-generator-oper-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtimidity-through-0.2.8-stack-out-of-bounds-write-via-parse-gen-in-soundfont-loader","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111155","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111155 — libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader i…","description":"libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values as table indices. Attackers can supply a crafted .sf2 file loaded through mid_set_soundfont() to read heap memory out of…","indicators":{"cves":["CVE-2026-111155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:30.387Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/sezero/libtimidity","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sezero/libtimidity/blob/a52adf6aee2635e2a16797213a089c2180e67757/src/sndfont.c#L578-L590","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libtimidity-soundfont-generator-oper-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtimidity-through-0.2.8-out-of-bounds-read-via-soundfont-loader-sndfont-c","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111156","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111156 — libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/…","description":"libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 preset header bank and preset values. Attackers can craft a .sf2 file whose bank or preset indexes past the 128-entry ton…","indicators":{"cves":["CVE-2026-111156"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:30.527Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/sezero/libtimidity","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sezero/libtimidity/blob/a52adf6aee2635e2a16797213a089c2180e67757/src/sndfont.c#L199-L224","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libtimidity-soundfont-generator-oper-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtimidity-through-0.2.8-out-of-bounds-access-via-soundfont-preset-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111157","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111157 — SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i(…","description":"SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the WAV fmt chunk. Attackers can supply a crafted MS ADPCM WAV file to sox or any libsox consumer to write a partially controlled 16-bit…","indicators":{"cves":["CVE-2026-111157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:30.663Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/chirlu/sox/blob/42b3557e13e0fe01a83465b672d89faddbe65f49/src/adpcm.c#L144-L166","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/chirlu/sox/blob/42b3557e13e0fe01a83465b672d89faddbe65f49/src/wav.c#L250-L251","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/sox-wav-ms-adpcm-samplesperblock-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/projects/sox/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sox-through-14.4.2-heap-out-of-bounds-write-via-ms-adpcm-wav-decoding","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111158","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111158 — EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() i…","description":"EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated miniSEED 2 record buffers. Attackers can supply a 40 to 47 byte buffer passing MS2_ISVALIDHEADER to msr3_parse() or ms3_detect(), over-reading up to 8 bytes an…","indicators":{"cves":["CVE-2026-111158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:30.810Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/EarthScope/libmseed","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EarthScope/libmseed/blob/d6e6ad306de5b7bdde072e5a5e3d58ddcc11abd8/parseutils.c#L192-L234","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EarthScope/libmseed/commit/c93a36a1381e944b59b10967342ee1cb94304223","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libmseed-ms3detect-short-header-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/earthscope-libmseed-through-3.5.4-heap-out-of-bounds-read-via-ms3-detect","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111159","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111159 — libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attr…","description":"libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being doubled. Attackers can supply a crafted .L01/.Lx01 file with oversized 'ea' metadata counts to crash the application or…","indicators":{"cves":["CVE-2026-111159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:30.960Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/libyal/libewf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libewf/blob/d76fd0bb21601e2969bc88ffdaeb861023f6a5b2/libewf/libewf_lef_extended_attribute.c#L362-L408","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libyal/libewf/blob/d76fd0bb21601e2969bc88ffdaeb861023f6a5b2/libewf/libewf_lef_extended_attribute.c#L456-L560","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libewf-lef-extended-attribute-utf16-size-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libewf-through-20260924-heap-out-of-bounds-read-via-l01-extended-attribute-parsing","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111161","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111161 — libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in B…","description":"libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adl_openFile() or adl_open…","indicators":{"cves":["CVE-2026-111161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:31.260Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Wohlstand/libADLMIDI","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Wohlstand/libADLMIDI/blob/99c5e03a5cf9b4fdf35b53efddb853c96320d50f/src/midiseq/impl/miditrack_impl.hpp#L350-L357","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Wohlstand/libADLMIDI/blob/99c5e03a5cf9b4fdf35b53efddb853c96320d50f/src/midiseq/impl/read_smf_impl.hpp#L113","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libadlmidi-notestates-note-index-stack-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libadlmidi-1.6.2-through-1.6.2.1-stack-out-of-bounds-write-via-bw-midisequencer-notestates","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libadlmidi-notestates-note-index-stack-oob","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111162","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111162 — WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseN…","description":"WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that wraps to roughly 4 GB, crashing applicatio…","indicators":{"cves":["CVE-2026-111162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:31.403Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Mindwerks/wildmidi","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Mindwerks/wildmidi/blob/340472ed4633d139d30c660b90eca03c1320e593/src/f_hmp.c#L258-L261","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Mindwerks/wildmidi/blob/340472ed4633d139d30c660b90eca03c1320e593/src/internal_midi.c#L2166-L2172","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/wildmidi-hmp-chunk-length-underflow-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wildmidi-through-0.5.0-heap-out-of-bounds-read-via-wm-parsenewhmp","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111163","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111163 — WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/…","description":"WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation, c…","indicators":{"cves":["CVE-2026-111163"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:31.550Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Mindwerks/wildmidi","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Mindwerks/wildmidi/blob/340472ed4633d139d30c660b90eca03c1320e593/src/f_hmi.c#L268-L290","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/wildmidi-hmp-chunk-length-underflow-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wildmidi-through-0.5.0-heap-out-of-bounds-read-via-wm-parsenewhmi","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/wildmidi-hmp-chunk-length-underflow-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111164","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111164 — UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c…","description":"UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing application…","indicators":{"cves":["CVE-2026-111164"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:31.690Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://gitlab.com/uade-music-player/uade","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.com/uade-music-player/uade/-/blob/659d2fb2dda66bb16ae43b46147135759f993d8e/src/frontends/common/amifilemagic.c#L1069-1078","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/uade-amifilemagic-bufsize-underflow-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/uade-through-3.05-out-of-bounds-read-in-uade-filemagic-via-short-module","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111165","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111165 — libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker load…","description":"libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices and…","indicators":{"cves":["CVE-2026-111165"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:32.287Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/sezero/mikmod","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sezero/mikmod/blob/6e658155f7e6b394a288dac796ba572634553fad/libmikmod/loaders/load_mtm.c#L257-L261","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libmikmod-mtm-imf-loader-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libmikmod-through-3.3.15-out-of-bounds-read-in-mtm-load-via-channel-count","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111166","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111166 — libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader t…","description":"libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex inde…","indicators":{"cves":["CVE-2026-111166"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:32.450Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/sezero/mikmod","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sezero/mikmod/blob/6e658155f7e6b394a288dac796ba572634553fad/libmikmod/loaders/load_imf.c#L702-L712","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libmikmod-mtm-imf-loader-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libmikmod-through-3.3.15-heap-out-of-bounds-read-via-imf-load","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libmikmod-mtm-imf-loader-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111167","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111167 — GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decode…","description":"GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property…","indicators":{"cves":["CVE-2026-111167"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:32.640Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/LibreDWG/libredwg","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LibreDWG/libredwg/blob/d9468ae948b8f07a08efa756c19f8916052358c0/src/acds.spec#L250-L260","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libredwg-acds-schema-prop-type-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/gnu-libredwg-through-0.14.8612-out-of-bounds-read-in-acds-private-acds-decoder","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111168","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111168 — LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allows authent…","description":"LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allows authenticated agents to execute script by uploading SVGs with malformed Content-Type parameters. Attackers can upload an SVG typed 'image/svg+xml; x' via /api/v1/media so GET /uploads/{uuid} serves it inline…","indicators":{"cves":["CVE-2026-111168"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:32.827Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/abhinavxd/libredesk","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/abhinavxd/libredesk/blob/086b08200d667f2cc083635e925d6f5e7b0097e3/cmd/media.go#L255-L272","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/abhinavxd/libredesk/blob/086b08200d667f2cc083635e925d6f5e7b0097e3/internal/media/media.go#L422-L433","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/abhinavxd/libredesk/commit/ab3a5ca682fcc1caec0950fc607b66caea49bec3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/abhinavxd/libredesk/pull/641","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/abhinavxd/libredesk/releases/tag/v2.9.0-rc.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/libredesk-before-2.9.0-rc.8-stored-xss-via-svg-upload-content-type-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111170","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111170 — kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset…","description":"kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() strips leading slashes while pathlib's join discards the base p…","indicators":{"cves":["CVE-2026-111170"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:33.153Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/kedro-org/kedro-plugins","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kedro-org/kedro-plugins/blob/611ce7a20dcb0be655190afb9064468fa278b08c/kedro-datasets/kedro_datasets/_utils/security.py#L22","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kedro-org/kedro-plugins/blob/611ce7a20dcb0be655190afb9064468fa278b08c/kedro-datasets/kedro_datasets/matplotlib/matplotlib_dataset.py#L198-L201","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kedro-org/kedro-plugins/pull/1544","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kedro-org/kedro-plugins/security/advisories/GHSA-cjg8-h5qc-hrjv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/kedro-datasets-9.3.0-through-9.6.0-path-traversal-via-matplotlibdataset-plot-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111171","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111171 — Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulne…","description":"Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses in CCIP Read URL validation. Malicious contracts can return OffchainLookup URLs with IPv4-mapped IPv6 hosts or AAAA reco…","indicators":{"cves":["CVE-2026-111171"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:33.300Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/ethereum/web3.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ethereum/web3.py/blob/c8c1ed0c9e77e1a8b74902e6a6825e0b00534b10/web3/utils/ccip_url_validation.py#L16-L57","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ethereum/web3.py/pull/3875","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ethereum/web3.py/security/advisories/GHSA-5hr4-253g-cpx2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/web3-py-7.15.0-through-7.16.0-and-8.0-0b2-through-8.0.0-ccip-read-ssrf-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/ApeWorX/web3.py/security/advisories/GHSA-5hr4-253g-cpx2","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111172","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111172 — @casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() tha…","description":"@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide, ca…","indicators":{"cves":["CVE-2026-111172"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:33.450Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/stalniy/casl","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/stalniy/casl/blob/80f2380d03cfe9b162685d510ba8bc0ce83d0598/packages/casl-ability/src/utils.ts#L11-L29","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/stalniy/casl/commit/58242cb3c7911c8a89bacfb7d732701d81bc1324","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/stalniy/casl/pull/1305","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/casl-ability-6.7.5-before-7.0.2-prototype-pollution-via-rulestofields-setbypath","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111219","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111219 — Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.p…","description":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making mp…","indicators":{"cves":["CVE-2026-111219"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:34.357Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-pppoe-secret-bang","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/vpn.inc#L272-L282","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_pppoe_edit.php#L141-L152","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-command-injection-via-pppoe-server-username","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111221","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111221 — Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authen…","description":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret. Attackers with L2TP or PPPoE Server edit privileges can POST a secret containing a quote and newline to vp…","indicators":{"cves":["CVE-2026-111221"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:34.650Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-l2tp-radius-mpd","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/vpn.inc#L202-L215","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/vpn.inc#L428-L441","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/vpn_l2tp.php#L137-L143","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-command-injection-via-radius-secret-mpd-conf-injection","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111222","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111222 — Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticate…","description":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add auto_prepend_file pointing at /var/db/zoneinfo, e…","indicators":{"cves":["CVE-2026-111222"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:34.797Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-timezone-phpini","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/system.inc#L2377-L2380","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L163-L166","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/rc.php_ini_setup#L220","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/system.php#L288","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-php-ini-injection-via-timezone-setting","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111225","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111225 — Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.lea…","description":"Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the unbound user. Attackers can embed shell metacharacters in the certificate common name or username, which is interpolated…","indicators":{"cves":["CVE-2026-111225"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:35.230Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-ovpn-learn-cn","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/sbin/openvpn.learn-address.sh#L57-L62","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.5.0-through-2.9.0-os-command-injection-via-openvpn-learn-address-sh","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111227","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111227 — Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.ph…","description":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives. Attackers can embed CR/LF characters in the aclname or aclaction fields writ…","indicators":{"cves":["CVE-2026-111227"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:35.527Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-unbound-acl-crlf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/unbound.inc#L1094-L1112","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_unbound_acls.php#L121-L142","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-crlf-injection-via-services-unbound-acls-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111228","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111228 — Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbo…","description":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock_queue_timeout paramete…","indicators":{"cves":["CVE-2026-111228"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:35.670Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-unbound-sock-timeout","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/unbound.inc#L590","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_unbound_advanced.php#L178","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.1-through-2.9.0-crlf-injection-via-services-unbound-advanced-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111230","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111230 — Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the…","description":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file…","indicators":{"cves":["CVE-2026-111230"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:35.960Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-dyndns-file","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/dyndns.class#L2151-L2171","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/dyndns.class#L598-L616","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/services_dyndns_edit.php#L138-L141","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-through-2.9.0-local-file-read-via-dynamic-dns-update-url","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111232","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111232 — Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that all…","description":"Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator[] color value that display_separa…","indicators":{"cves":["CVE-2026-111232"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:36.257Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-separator-color-xss","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/etc/inc/filter.inc#L6238-L6252","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/firewall_rules.php#L236-L245","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.3.0-through-2.9.0-stored-xss-via-separator-color","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111233","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111233 — Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in fi…","description":"Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote attackers to inject script via the unencoded if parameter. When the non-default Require Firewall Interface option is enabled, attackers can lure users with firewall…","indicators":{"cves":["CVE-2026-111233"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:36.397Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://abraxaslabs.tech/research/pfsense-ce-leftovers","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/abraxas/pfsense-rules-if-xss","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/firewall_rules.php#L138-L146","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pfsense/pfsense/blob/9363ac5b8651a1c7a333180425ce7719070f95f9/src/usr/local/www/firewall_rules.php#L391","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netgate-pfsense-ce-2.7.1-through-2.9.0-reflected-xss-via-firewall-rules-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111234","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111234 — SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers…","description":"SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links. Attackers can return a Location header or feed link pointing to a file:// path, causing file_get_contents() to read…","indicators":{"cves":["CVE-2026-111234"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:36.543Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/abraxas/pfsense-rss-file-redirect","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/simplepie/simplepie","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/File.php#L160-L176","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/File.php#L289-L293","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/simplepie/simplepie/blob/76cccb1b2c5dcaf44f304c925ab30c0f48643992/src/HTTP/Psr18Client.php#L75-L157","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/simplepie/simplepie/issues/968","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/simplepie/simplepie/pull/991","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/simplepie-through-1.9.0-local-file-read-via-file-redirect","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111252","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111252 — A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian…","description":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server memor…","indicators":{"cves":["CVE-2026-111252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:36.827Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/OpenNMS/opennms/pull/8898","label":"security@opennms.com","domainType":"primary"},{"url":"https://github.com/OpenNMS/opennms/pull/8952","label":"security@opennms.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55840","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55840 — Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() meth…","description":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolut…","indicators":{"cves":["CVE-2026-55840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:40.823Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Erudika/scoold/commit/9d61f6fe15d4f9f6262812ba7fea43be8d5bb745","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/releases/tag/1.69.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/security/advisories/GHSA-85fm-6f2v-74pq","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/security/advisories/GHSA-85fm-6f2v-74pq","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55842","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55842 — Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsConfiguratio…","description":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsConfiguration() method in src/main/java/com/erudika/scoold/ScooldServer.java combines addAllowedOriginPattern(\"*\") with setAllowCredentials(true), causing Spring to reflect any requesting origin while allowing co…","indicators":{"cves":["CVE-2026-55842"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:40.993Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Erudika/scoold/commit/6412441f656984c07af147b6ba2f2fc7906b2c5c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/releases/tag/1.69.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/security/advisories/GHSA-q684-4jqv-c63c","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57183","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-57183 — Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/m…","description":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/main/java/com/erudika/scoold/utils/ScooldUtils.java accepts a JWT signed with app_secret_key or para_secret_key for /api/config and /api/stats without requiring a registered API-key jti, and maps the r…","indicators":{"cves":["CVE-2026-57183"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:41.447Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Erudika/scoold/commit/de018c17a60c352f318109a762a377c325a5fd97","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/commit/e527d4da1ac04b6a35bd86e560c279f0160c5c02","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/releases/tag/1.69.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Erudika/scoold/security/advisories/GHSA-6q9q-cqq5-hvmq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-62322","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-62322 — Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backe…","description":"Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-controlled LINE account and induce a victim to visit the resulting c…","indicators":{"cves":["CVE-2026-62322"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:42.213Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/python-social-auth/social-core/commit/5b3b90d07ebccc1f5b076445b27ea35ec059764b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-social-auth/social-core/pull/1829","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-social-auth/social-core/releases/tag/5.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-social-auth/social-core/security/advisories/GHSA-526j-582w-7fm9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-92707","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92707 — MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing att…","description":"MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[] from each declared array length before th…","indicators":{"cves":["CVE-2026-92707"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:48.703Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/MessagePack-CSharp/MessagePack-CSharp/commit/7fd78bbf3476e03beae8b0f7a521125525a8a64a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MessagePack-CSharp/MessagePack-CSharp/commit/95b63fca4f7097d3cac12d1a95286af4b4bbf02c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases/tag/v2.5.303","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases/tag/v3.1.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/MessagePack-CSharp/MessagePack-CSharp/security/advisories/GHSA-qhrr-8q5h-9q3h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-94621","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94621 — AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the Al…","description":"AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API favicon extractor validates a user-supplied hostname with a first DNS lookup but allows the HTTP client to perform a second DNS lookup when connecting. An authenticated low-privile…","indicators":{"cves":["CVE-2026-94621"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:49.410Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/aliasvault/aliasvault/commit/7eb4fee71f4582cfc80b8daea421b99d6aa9f814","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aliasvault/aliasvault/commit/90ea7d6bb4c74ca169ee1dde3ca38b08bd0966ed","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aliasvault/aliasvault/pull/2311","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aliasvault/aliasvault/releases/tag/0.30.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aliasvault/aliasvault/security/advisories/GHSA-7hm6-fj4m-pf6f","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96449","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96449 — Missing Authorization vulnerability in WPExperts WP EasyPay wp-easy-pay allows Exploiting Incorrectl…","description":"Missing Authorization vulnerability in WPExperts WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from n/a through 4.5.4.","indicators":{"cves":["CVE-2026-96449"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:49.853Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/wp-easy-pay/vulnerability/wordpress-wp-easypay-plugin-4-5-4-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104198","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104198 — ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0…","description":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken() returns false when a token is malformed or has an invalid signature, but the caller…","indicators":{"cves":["CVE-2026-104198"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T20:17:06.127Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/ZoneMinder/zoneminder/commit/144a04ca4fff5fd02745ce8afc239ba5e05cf8ac","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/6b94903e634fdb46cb71a48eadccf1aa14f0c2bb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/71bb186b230dbe2aba5e2f804c36810aae892088","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/95460a945ab7e5c63dc0551bdd6230a3026ceb9e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/969baa38912018b502617d09e836d0bfa57d4af6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/commit/d71fbb805e4695a9599498a1a2ee3b286ef41c96","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-23fj-frfw-hmcr","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108435","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108435 — Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose i…","description":"Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-108435"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:08.903Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108435","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108438","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108438 — Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over…","description":"Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-108438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:09.260Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108438","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108454","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108454 — Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose informat…","description":"Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-108454"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T21:17:11.147Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108454","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110917","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110917 — Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read m…","description":"Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110917"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.053Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/569038297","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110918","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110918 — Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read…","description":"Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110918"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.160Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01886704284.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568937999","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111269","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111269 — libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in…","description":"libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the app…","indicators":{"cves":["CVE-2026-111269"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.680Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/libical/libical","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libical/libical/blob/9cfca65c122fa23b9680a28e0c9225a2fd015fc5/src/libical/icalvalue.c#L1608-L1645","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libical/libical/commit/d753885ce2de7c105d6b8c405aa7aee1d98ad8de","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libical/libical/pull/1455","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libical-icalvalue-decode-ical-string-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libical-through-4.0.6-heap-out-of-bounds-read-via-icalvalue-decode-ical-string","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111270","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111270 — libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src…","description":"libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping patt_len value to corrupt heap memory and crash the co…","indicators":{"cves":["CVE-2026-111270"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.820Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Konstanty/libmodplug","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Konstanty/libmodplug/blob/d1b97ed0020bc620a059d3675d1854b40bd2608d/src/load_dsm.cpp#L130-L139","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libmodplug-dsm-pattern-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libmodplug-through-0.8.9.1-heap-out-of-bounds-write-via-csoundfile-readdsm","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111271","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111271 — libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::Rea…","description":"libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder…","indicators":{"cves":["CVE-2026-111271"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:27.957Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/Konstanty/libmodplug","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Konstanty/libmodplug/blob/d1b97ed0020bc620a059d3675d1854b40bd2608d/src/load_ams.cpp#L509-L537","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libmodplug-dsm-pattern-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libmodplug-through-0.8.9.1-heap-out-of-bounds-read-via-csoundfile-readams2","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/libmodplug-dsm-pattern-oob-write","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111272","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111272 — LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that…","description":"LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image.","indicators":{"cves":["CVE-2026-111272"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:28.100Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/LibRaw/LibRaw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LibRaw/LibRaw/blob/b93f6e45c194f5df9b02a43b1af9a54b4f41f33f/src/metadata/nikon.cpp#L873-L967","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libraw-nikon-shotinfo-orientationoffset-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libraw-through-0.22.2-heap-out-of-bounds-read-via-parsenikonmakernote-shotinfo","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111273","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111273 — unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse…","description":"unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a crafted TAR archive with a full ustar prefix and name to write a NUL byte past the allocation, corrupting heap memory and…","indicators":{"cves":["CVE-2026-111273"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:28.333Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/selmf/unarr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/selmf/unarr/blob/b211040df83dee513362cdeb9bd87afa26fd5e38/tar/parse-tar.c#L242-L254","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/unarr-tar-zip-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/unarr-through-1.1.1-off-by-one-heap-buffer-overflow-via-tar-get-name","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/cve-2026-111273-111274-unarr-tar-zip-oob","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111274","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111274 — unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/pars…","description":"unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated ZIP64 record to read past the heap buffer and cra…","indicators":{"cves":["CVE-2026-111274"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:28.477Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/selmf/unarr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/selmf/unarr/blob/b211040df83dee513362cdeb9bd87afa26fd5e38/zip/parse-zip.c#L48-L72","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/unarr-tar-zip-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/unarr-through-1.1.1-heap-out-of-bounds-read-via-zip-parse-extra-fields","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111275","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111275 — nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_…","description":"nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked. Attackers can supply a crafted 540-byte NIfTI-2 header read via nifti_image_read() to crash applications or corrupt stack m…","indicators":{"cves":["CVE-2026-111275"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:28.623Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/NIFTI-Imaging/nifti_clib","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/NIFTI-Imaging/nifti_clib/blob/96b9954fafcf3bd69a4ee2091b0d707ed2077697/nifti2/nifti2_io.c#L4985-L5026","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/NIFTI-Imaging/nifti_clib/issues/195","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/NIFTI-Imaging/nifti_clib/pull/197","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/nifticlib-nifti2-dim0-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/nifti-clib-through-3.0.1-stack-out-of-bounds-access-via-nifti-convert-n2hdr2nim","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111278","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111278 — NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers…","description":"NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captcha_image value with a pattern match, and submit it to a…","indicators":{"cves":["CVE-2026-111278"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:28.963Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/nivocart/nivocart","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nivocart/nivocart/blob/5bc2c3fc7caed9846b58959183f8ccf599cd4399/upload/catalog/controller/information/contact.php#L144-L150","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nivocart/nivocart/blob/5bc2c3fc7caed9846b58959183f8ccf599cd4399/upload/catalog/view/theme/default/template/information/contact.tpl#L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nivocart/nivocart/issues/27","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nivocart-through-2.5.1-captcha-bypass-via-answer-disclosed-in-page-html","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111284","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111284 — Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php t…","description":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString. Attackers permitted to create Public Holidays or Mandatory Days can store JavaScript payloads that…","indicators":{"cves":["CVE-2026-111284"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:29.893Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/aureuserp/aureuserp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/blob/v1.6.0/plugins/webkul/time-off/src/Filament/Actions/HolidayAction.php#L42-L63","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/pull/1606","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/By7ESbAozl","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aureus-erp-through-1.6.0-stored-xss-via-time-off-holiday-action-modal","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111313","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111313 — JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-j…","description":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata ad…","indicators":{"cves":["CVE-2026-111313"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:30.200Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/DaKheera47/job-ops","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/DaKheera47/job-ops/blob/v0.13.1/orchestrator/src/server/api/routes/manual-jobs.ts#L124-L150","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/job-ops-manual-jobs-fetch-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/jobops-through-0.13.1-ssrf-via-post-api-manual-jobs-fetch","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111320","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111320 — ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that…","description":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to rea…","indicators":{"cves":["CVE-2026-111320"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:30.343Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/ValueCell-ai/valuecell","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ValueCell-ai/valuecell/blob/v0.1.20/python/valuecell/server/api/routers/models.py#L216-L261","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/ValueCell-ai/valuecell/blob/v0.1.20/python/valuecell/server/api/routers/models.py#L569","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/valuecell-model-provider-check-unauth-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/valuecell-through-0.1.20-unauthenticated-ssrf-via-api-v1-models-check","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/valuecell-model-provider-check-unauth-ssrf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111321","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111321 — TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticat…","description":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login ca…","indicators":{"cves":["CVE-2026-111321"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:30.487Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/TaskingAI/TaskingAI","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/TaskingAI/TaskingAI/blob/v0.3.0/backend/app/services/tool/action/openapi_call.py#L144","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/TaskingAI/TaskingAI/blob/v0.3.0/backend/app/services/tool/action/openapi_utils.py#L168-L169","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/taskingai-user-action-openapi-server-url-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/taskingai-through-0.3.0-ssrf-via-openapi-servers-0-url-in-actions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111323","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111323 — RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the a…","description":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata s…","indicators":{"cves":["CVE-2026-111323"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:30.780Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/samugit83/redamon","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/api.py#L1688","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_helpers/tradecraft_lookup.py#L231","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_helpers/tradecraft_lookup.py#L539","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/redamon-tradecraft-verify-unauth-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/redamon-through-7.0.1-unauthenticated-ssrf-via-tradecraft-verify-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/redamon-tradecraft-verify-unauth-ssrf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111324","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111324 — rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated…","description":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log in p…","indicators":{"cves":["CVE-2026-111324"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:30.927Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/lejianwen/rustdesk-api","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lejianwen/rustdesk-api/blob/v2.7/http/controller/api/peer.go#L26-L57","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lejianwen/rustdesk-api/blob/v2.7/http/router/api.go#L60-L76","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/rustdesk-api-sysinfo-unauth-peer-tamper","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rustdesk-api-through-2.7-authorization-bypass-via-post-api-sysinfo","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111330","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111330 — JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin c…","description":"JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go. Attackers who obtain the accounts table through database access or backups can crack console passwords using pr…","indicators":{"cves":["CVE-2026-111330"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:31.210Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/juggleim/im-server","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/juggleim/im-server/blob/v1.8.16/sql/imserver.sql#L3-L15","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/juggleim/imserver-console/blob/v1.0.10/services/accountservice.go#L95","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/juggleim-im-server-default-admin-credential","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/juggleim-im-server-through-1.8.16-weak-password-hashing-via-unsalted-sha-1","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111331","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111331 — Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router th…","description":"Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or appli…","indicators":{"cves":["CVE-2026-111331"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:31.350Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/Dokploy/dokploy","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Dokploy/dokploy/blob/v0.30.8/apps/dokploy/server/api/routers/port.ts#L17-L113","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Dokploy/dokploy/blob/v0.30.8/packages/server/src/services/permission.ts#L244-L261","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/dokploy-through-0.30.8-cross-organization-authorization-bypass-via-port-trpc-router","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111343","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111343 — pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allo…","description":"pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/details/{id}. Low-privilege attackers can enumerate sequential user ids to obtain usernames, real names, phone numbers, emai…","indicators":{"cves":["CVE-2026-111343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:31.650Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/pig-mesh/pig","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pig-mesh/pig/blob/v4.1.1/pig-upms/pig-upms-biz/src/main/java/com/pig4cloud/pig/admin/controller/SysUserController.java#L94-L102","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/pig-mesh-user-details-byid-missing-authz-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/pig-through-4.1.1-missing-authorization-via-get-admin-user-details-id","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111344","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111344 — APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticate…","description":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission checks…","indicators":{"cves":["CVE-2026-111344"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:31.813Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/apitable/apitable","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/apitable/apitable/blob/v1.14.0-beta/backend-server/application/src/main/java/com/apitable/workspace/controller/NodeController.java#L1043-L1057","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/apitable-node-description-cross-space-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/apitable-through-1.14.0-beta-authorization-bypass-via-get-node-nodeid-description","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/apitable-node-description-cross-space-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111345","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111345 — Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated…","description":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, which lacks participant checks, to obtain full message history p…","indicators":{"cves":["CVE-2026-111345"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:31.980Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/polonel/trudesk","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/polonel/trudesk/blob/v1.2.11/src/controllers/api/v1/messages.js#L255-L308","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/polonel/trudesk/blob/v1.2.11/src/models/chat/message.js#L70-L101","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/trudesk-conversation-messages-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/trudesk-through-1.2.11-authorization-bypass-via-get-api-v1-messages-conversation-id","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111346","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111346 — ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that a…","description":"ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and do…","indicators":{"cves":["CVE-2026-111346"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:32.150Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/easysoft/zentaopms","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/easysoft/zentaopms/blob/zentaopms_22.6_20260917/module/action/control.php#L384-L426","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/easysoft/zentaopms/blob/zentaopms_22.6_20260917/module/action/model.php#L2025-L2057","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/zentaopms-action-editcomment-cross-user-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/zentao-pms-through-22.6-authorization-bypass-via-action-editcomment","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/zentaopms-action-editcomment-cross-user-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111347","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111347 — go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository,…","description":"go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /base/decryptpwd endpoint, recovering cleartext LDAP credentials…","indicators":{"cves":["CVE-2026-111347"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:32.300Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/opsre/go-ldap-admin","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L20-L24","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/config/config.go#L76-L77","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/logic/base_logic.go#L188-L199","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/opsre/go-ldap-admin/blob/v0.6.2/routes/base_routes.go#L50","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-reset","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/go-ldap-admin-through-0.6.2-hard-coded-rsa-private-key-via-base-decryptpwd","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/go-ldap-admin-hardcoded-rsa-key-decrypt-oracle-and-unauth-password-reset","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111348","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111348 — Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php a…","description":"Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access other customers' after-sale records by supplying their ids. Attackers with self-registered accounts can call the detail, goodsInfo, cancel, e…","indicators":{"cves":["CVE-2026-111348"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:32.440Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/likeadmin-likeshop/likeshop","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/likeadmin-likeshop/likeshop/blob/3.5.1/server/application/api/controller/AfterSale.php#L52-L102","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/likeadmin-likeshop/likeshop/blob/3.5.1/server/application/api/logic/AfterSaleLogic.php#L251-L377","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/likeshop-after-sale-api-cross-user-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/likeshop-through-3.5.1-idor-via-aftersale-api-refund-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111349","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111349 — Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource…","description":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert a…","indicators":{"cves":["CVE-2026-111349"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:32.587Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/puemos/craftplan","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/puemos/craftplan/blob/v0.7.5/lib/craftplan/accounts/checks/api_scope_check.ex#L33-L40","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/puemos/craftplan/blob/v0.7.5/lib/craftplan/crm/customer.ex#L91-L94","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/craftplan-customer-public-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/craftplan-through-0.7.5-missing-authorization-via-crm-customer-json-api-and-graphql","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/craftplan-customer-public-write","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111350","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111350 — Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer grou…","description":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group link…","indicators":{"cves":["CVE-2026-111350"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:32.737Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/papermark/papermark","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermark/papermark/blob/v0.22.0/pages/api/teams/%5BteamId%5D/datarooms/%5Bid%5D/groups/%5BgroupId%5D/index.ts#L155-L190","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermark/papermark/blob/v0.22.0/pages/api/teams/%5BteamId%5D/datarooms/%5Bid%5D/groups/%5BgroupId%5D/links.ts#L52-L56","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermark/papermark/commit/7fa52b23944823a9e74402fca8e48d644239bc0b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/papermark/papermark/commit/b81cf62f390cda112f35538eb09e54b5f728b74a","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/papermark-dataroom-group-delete-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/papermark-through-0.22.0-missing-authorization-in-data-room-viewer-group-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111351","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111351 — metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestCon…","description":"metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read record…","indicators":{"cves":["CVE-2026-111351"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:32.883Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/metasfresh/metasfresh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/metasfresh/metasfresh/blob/5.175/backend/de.metas.ui.web.base/src/main/java/de/metas/ui/web/board/BoardRestController.java#L137-L220","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/metasfresh/metasfresh/blob/56dd881b972af4edb071e4f1261a55a8b1a9c4d7/backend/de.metas.ui.web.base/src/main/java/de/metas/ui/web/board/BoardDescriptorRepository.java#L473-L511","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/metasfresh-board-rest-missing-record-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/metasfresh-through-5.175-authorization-bypass-via-rest-api-board-rest-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/metasfresh-board-rest-missing-record-authz","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111353","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111353 — Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticate…","description":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or /api/v1/storage/ticket/:id/upload/singl…","indicators":{"cves":["CVE-2026-111353"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:33.190Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/Peppermint-Lab/peppermint/blob/0.5.5/apps/api/src/controllers/storage.ts#L9-L35","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Peppermint-Lab/peppermint/blob/0.5.5/apps/api/src/controllers/time.ts#L6-L27","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Peppermint-Lab/peppermint/blob/0.5.5/apps/api/src/main.ts#L57-L70","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/peppermint-data-logs-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/peppermint-through-0.5.5-missing-authorization-via-time-tracking-and-attachment-upload-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111355","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111355 — zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authent…","description":"zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplying out-of-scope record ids. Attackers holding user or organization module permissions with Dept or Self scope can call UserService an…","indicators":{"cves":["CVE-2026-111355"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:33.503Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/zhontai/Admin.Core/blob/v10.1.0/src/modules/admin/ZhonTai.Admin/Services/Org/OrgService.cs#L64-L68","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zhontai/Admin.Core/blob/v10.1.0/src/modules/admin/ZhonTai.Admin/Services/User/UserService.cs#L118-L144","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zhontai/Admin.Core/blob/v10.1.0/src/modules/admin/ZhonTai.Admin/Services/User/UserService.cs#L595-L636","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zhontai/Admin.Core/blob/v10.1.0/src/modules/admin/ZhonTai.Admin/Services/User/UserService.cs#L887-L900","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zhontai/Admin.Core/blob/v10.1.0/src/modules/admin/ZhonTai.Admin/Services/User/UserService.cs#L977-L1000","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/zhontai-admin-core-by-id-missing-data-scope-cross-dept","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/zhontai-admin-core-through-10.1.0-authorization-bypass-via-user-and-organization-by-id-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111358","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111358 — SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows…","description":"SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other workspaces' tags by supplying unvalidated tag IDs. Attackers can submit sequential tag IDs via the web subscriber form or CSV import to r…","indicators":{"cves":["CVE-2026-111358"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:33.793Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/mettle/sendportal-core","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mettle/sendportal-core/blob/v4.0.1/src/Http/Requests/SubscriberRequest.php#L34-L37","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mettle/sendportal-core/blob/v4.0.1/src/Repositories/Subscribers/BaseSubscriberTenantRepository.php#L48-L51","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/sendportal-subscriber-tags-cross-workspace-attach","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sendportal-sendportal-core-through-4.0.1-cross-workspace-tag-attachment-via-subscriber-form","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/sendportal-subscriber-tags-cross-workspace-attach","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111363","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111363 — BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows a…","description":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file_id values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/file_bbox to re…","indicators":{"cves":["CVE-2026-111363"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:34.103Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/dataelement/bisheng","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dataelement/bisheng/blob/v3.0.0-beta4/src/backend/bisheng/knowledge/api/endpoints/knowledge.py#L663-L670","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/dataelement/bisheng/blob/v3.0.0-beta4/src/backend/bisheng/knowledge/domain/services/knowledge_service.py#L2523-L2533","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/bisheng-knowledge-file-bbox-cross-user-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/bisheng-through-3.0.0-beta4-idor-via-api-v1-knowledge-file-bbox","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/bisheng-knowledge-file-bbox-cross-user-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111364","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111364 — MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentCont…","description":"MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to re…","indicators":{"cves":["CVE-2026-111364"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:34.260Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/mindoc-org/mindoc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mindoc-org/mindoc/blob/v2.2-beta.2/controllers/DocumentController.go#L847-L973","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mindoc-org/mindoc/blob/v2.2-beta.2/routers/router.go#L242","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/mindoc-api-content-get-cross-book-document-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/mindoc-through-2.2-beta.2-idor-via-api-key-content-id-get-branch","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111365","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111365 — cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-super…","description":"cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with anoth…","indicators":{"cves":["CVE-2026-111365"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:34.407Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/cool-team-official/cool-admin-midway","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/cool-team-official/cool-admin-midway/blob/e545ef6f3b0c08581e34bd3207ca57d851ccc3ae/src/modules/base/controller/admin/sys/role.ts#L11-L36","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/cool-team-official/cool-admin-midway/blob/e545ef6f3b0c08581e34bd3207ca57d851ccc3ae/src/modules/base/service/sys/role.ts#L54-L118","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/cool-admin-midway-base-crud-role-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cool-admin-midway-through-8.0.0-missing-authorization-via-system-role-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/cool-admin-midway-base-crud-role-ownership-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111367","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111367 — BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenti…","description":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribe_new,…","indicators":{"cves":["CVE-2026-111367"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:34.703Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/aaPanel/BillionMail","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aaPanel/BillionMail/blob/v4.9/core/internal/service/batch_mail/jwt.go#L98-L123","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aaPanel/BillionMail/blob/v4.9/core/manifest/config/config.yaml","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/billionmail-unsubscribe-subscribe-jwt-deterministic-secret-forgery","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/billionmail-through-4.9-forgeable-jwts-via-default-signing-key","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111368","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111368 — ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API…","description":"ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissions in other courses. Attackers can supply their own course id with another course's submission UUID to PUT or DELETE ha…","indicators":{"cves":["CVE-2026-111368"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:34.847Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/classroomio/classroomio","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/classroomio/classroomio/blob/v1.0.0/apps/api/src/routes/course/submission.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/classroomio/classroomio/blob/v1.0.0/packages/db/src/queries/submission/submission.ts#L217-L245","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/classroomio/classroomio/commit/1844ad9671a0d9c2566d3431d82f34d39016242c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/classroomio-course-resource-id-scoping-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/classroomio-through-1.0.0-idor-via-course-submission-update-grade-and-delete-routes","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/classroomio-course-resource-id-scoping-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92228","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92228 — The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted…","description":"The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi-team mode with the Keycloak auth manager and provision teams through it are affected: any authenticated member of one te…","indicators":{"cves":["CVE-2026-92228"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:21:11.410Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/apache/airflow/pull/73696","label":"security@apache.org","domainType":"primary"},{"url":"https://lists.apache.org/thread/b8wb6bogvnpfzo9do5w6d1lb8fxl5s79","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/15/9","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94135","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94135 — The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClien…","description":"The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verification by default unless the connection explicitly sets `no_host_key_check` to false. Deployments that run SFTP sensors or operators in deferrable mode are affected.…","indicators":{"cves":["CVE-2026-94135"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:21:12.140Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/apache/airflow/pull/73419","label":"security@apache.org","domainType":"primary"},{"url":"https://lists.apache.org/thread/jbzs97t9y1zd1yp5rvxzjbx90mqz82kf","label":"security@apache.org","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-94134","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96806","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96806 — The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked…","description":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but `KeycloakJWTMiddleware` then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: after…","indicators":{"cves":["CVE-2026-96806"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:21:19.090Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/apache/airflow/pull/73695","label":"security@apache.org","domainType":"primary"},{"url":"https://lists.apache.org/thread/7vwjg3wn8wxkprg6csxcvs6wkh301r0t","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/15/12","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16754","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-16754 — A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, d…","description":"A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.","indicators":{"cves":["CVE-2026-16754"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:05.020Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://iknow.lenovo.com.cn/detail/442625","label":"psirt@lenovo.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16755","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-16755 — A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Ch…","description":"A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.","indicators":{"cves":["CVE-2026-16755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:05.220Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://iknow.lenovo.com.cn/detail/442625","label":"psirt@lenovo.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89057","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89057 — A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow…","description":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.","indicators":{"cves":["CVE-2026-89057"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:06.417Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-218699","label":"psirt@lenovo.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89062","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89062 — A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver th…","description":"A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.","indicators":{"cves":["CVE-2026-89062"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:07.037Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-218444","label":"psirt@lenovo.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92777","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92777 — A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical…","description":"A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.","indicators":{"cves":["CVE-2026-92777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T00:17:07.333Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-221035","label":"psirt@lenovo.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100159","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100159 — The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1…","description":"The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is due to the ays_popup_get_user_ip() function reading the client-controlled Client-IP / X-Forwarded-For / Forwarded / X-Forwarded / Forwarded-For request headers, sanitizing them only…","indicators":{"cves":["CVE-2026-100159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:17:58.000Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.4.2/includes/class-ays-pb-data.php#L79","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.4.2/public/class-ays-pb-public.php#L3389","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.4.2/public/partials/ays-pb-public-templates.php#L4299","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.4.2/public/partials/ays-pb-public-templates.php#L4560","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.4.2/public/partials/ays-pb-public-templates.php#L69","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ays-popup-box/tags/6.4.3/public/class-ays-pb-public.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/535c4796-d1aa-4cd1-922e-f9dcf216f76d?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111212","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111212 — A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by…","description":"A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.get_modelmeta.custom_metadata_map of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the a…","indicators":{"cves":["CVE-2026-111212"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:03.650Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/ImprintLab/Medical-SAM-Adapter/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ImprintLab/Medical-SAM-Adapter/issues/145","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111212","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004881","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420763","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420763/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111237","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111237 — A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52…","description":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/name…","indicators":{"cves":["CVE-2026-111237"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:03.880Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/CASIA-LMC-Lab/FastSAM/issues/288","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111237","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004882","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420764","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420764/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111373","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111373 — FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport t…","description":"FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocket_reply_pong passes a nullptr stream to websocket_reply_close, triggering an asse…","indicators":{"cves":["CVE-2026-111373"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:04.063Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-83g2-gf92-5c4g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-before-3.32.0-null-dereference-via-zero-length-websocket-ping","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111374","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111374 — FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client…","description":"FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised camera media types. Attackers can send a StartStreamsRequest with oversized dimensions to force large pending-sample allocations and reconfigure t…","indicators":{"cves":["CVE-2026-111374"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:04.223Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xq87-9rrm-6wqw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-from-3.30.0-before-3.32.0-resource-exhaustion-via-rdpecam-startstreamsrequest","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xq87-9rrm-6wqw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111375","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111375 — FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL cl…","description":"FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows malicious RDP servers to trigger heap over-reads by sending non-NUL-terminated window titles. Attackers can send a full-length WINDOW_ORDER_FIELD_TITLE update that wf_rail_window_comm…","indicators":{"cves":["CVE-2026-111375"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:04.363Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3rvr-qvx8-rj23","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.0.0-before-3.32.0-out-of-bounds-read-via-rail-window-title","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111376","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111376 — FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows cl…","description":"FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTS_SIZE request with a cbRequested of fewer t…","indicators":{"cves":["CVE-2026-111376"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:04.510Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pvgq-84w2-93ph","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-3.30.0-before-3.32.0-heap-over-read-via-windows-cliprdr-filecontents-size","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pvgq-84w2-93ph","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111377","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111377 — FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannel…","description":"FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can start a static virtual channel message, withhold the LAST flag, and send endless fragments to exhaust server memory.","indicators":{"cves":["CVE-2026-111377"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:04.703Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-xm53-352c-57jw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/freerdp-2.0.0-before-3.32.0-memory-exhaustion-via-static-channel-reassembly","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111383","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111383 — Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticat…","description":"Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unbounded concurrent connections to the /api/v1/ws/transfer WebSocket endpoint. Attackers can hold thousands of subscriptions created by ServerTransferClass.Subscribe without limits,…","indicators":{"cves":["CVE-2026-111383"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:05.537Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/security/advisories/GHSA-ch6h-w872-77mx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nezha-2.0.13-before-2.3.15-denial-of-service-via-api-v1-ws-transfer-websocket","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/nezhahq/nezha/security/advisories/GHSA-ch6h-w872-77mx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111384","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111384 — Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager W…","description":"Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint because fmStream never calls SetReadLimit, leaving message size unbounded. Authenticated users with file manager scopes can send one oversized binary message to /api/v1/ws/file/:id,…","indicators":{"cves":["CVE-2026-111384"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:05.740Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/security/advisories/GHSA-7242-982f-83p9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nezha-1.0.0-before-2.3.15-memory-exhaustion-via-file-manager-websocket","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111385","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111385 — Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool th…","description":"Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url and fs.upload_url transfer URLs from the unvalidated Host header. Attackers who control the Host header seen on a victim's MCP request can redirect file uploads or capture on…","indicators":{"cves":["CVE-2026-111385"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:05.893Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/commit/c726930833937a0aebb2a924064f236faea889f6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/security/advisories/GHSA-rj3w-jrj7-x7c3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nezha-2.1.0-before-2.3.15-host-header-injection-via-mcp-transfer-tools","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111386","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111386 — Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenti…","description":"Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enumerate other tenants' server IDs through differential responses. Attackers can sweep sequential IDs against getServerConfig and setServerConfig, distinguishing 'permission denied'…","indicators":{"cves":["CVE-2026-111386"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:06.057Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/security/advisories/GHSA-228w-p4h4-6rvw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nezha-1.7.0-before-2.3.15-cross-tenant-server-id-enumeration-via-getserverconfig","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111387","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111387 — Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenti…","description":"Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read cleartex…","indicators":{"cves":["CVE-2026-111387"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:06.217Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/commit/39d398066d8c644fe452f74704e34ada6c7ab61e","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nezhahq/nezha/security/advisories/GHSA-hpfr-cmgc-f455","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/nezha-2.2.5-before-2.3.15-information-disclosure-via-ddns-list-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111388","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111388 — Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip a…","description":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for non-session authentication methods, including API key, OAuth, and header-based authentication. Attackers holding valid credentials of these types can authenticate from IP addresses outsid…","indicators":{"cves":["CVE-2026-111388"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:06.380Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/frappe/frappe/security/advisories/GHSA-h9jq-7pgf-hw8q","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/frappe-before-16.33.0-restrict-ip-allowlist-bypass-via-api-key-oauth-authentication","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104769","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104769 — The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Travers…","description":"The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of a…","indicators":{"cves":["CVE-2026-104769"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:23.037Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/file-cache.php#L97","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/minifier.php#L161","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/minifier.php#L82","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/optimize-css/optimize-css.php#L221","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/optimize-css/stylesheet.php#L80","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/process.php#L92","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/vendor/matthiasmullie/minify/src/CSS.php#L207","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/vendor/matthiasmullie/minify/src/Minify.php#L218","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3735830%40debloat&new=3735830%40debloat","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/a8c9b57b-d60d-4197-a9f9-66206518733f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111443","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111443 — Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test appl…","description":"Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELS_TEST_CONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the query…","indicators":{"cves":["CVE-2026-111443"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:30.133Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-xcj9-wm25-4cg4","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111449","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111449 — Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disab…","description":"Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that clie…","indicators":{"cves":["CVE-2026-111449"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:31.323Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-8r22-vwcc-v55m","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111450","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111450 — Wheels through 4.1.1 derives its default production error-email address from the Host header of the…","description":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers…","indicators":{"cves":["CVE-2026-111450"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:31.500Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-8gcv-3v9h-7gj2","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77829","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77829 — The Cooked – Recipe Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…","description":"The Cooked – Recipe Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via [cooked-timer] Shortcode Content in all versions up to, and including, 1.16.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with cont…","indicators":{"cves":["CVE-2026-77829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:38.197Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/cooked/tags/1.16.0/includes/class.cooked-shortcodes.php#L128","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cooked/tags/1.16.0/includes/class.cooked-shortcodes.php#L155","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/cooked/tags/1.16.0/includes/class.cooked-shortcodes.php#L159","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3729711%40cooked&new=3729711%40cooked","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0592380d-fd78-48ed-a180-299fc20a41ee?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89280","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89280 — The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Et…","description":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key. T…","indicators":{"cves":["CVE-2026-89280"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:41.037Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/getdokan/dokan/pull/3433/changes","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/dokan-lite/tags/5.1.1/includes/Order/functions.php#L858","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/dokan-lite/tags/5.1.1/includes/REST/CustomersController.php#L227","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/dokan-lite/tags/5.1.1/includes/REST/CustomersController.php#L352","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/dokan-lite/tags/5.1.1/includes/REST/CustomersController.php#L60","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/dokan-lite/tags/5.1.1/includes/REST/CustomersController.php#L99","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3734440/dokan-lite/trunk/includes/REST/CustomersController.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/dfa56b6b-508f-44d8-a81c-2b84cebd245b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93535","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93535 — The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable…","description":"The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon_light' Shortcode Attribute in all versions up to, and including, 5.3.17 due to insufficient input sanitization and output escaping. This makes it possible…","indicators":{"cves":["CVE-2026-93535"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:41.860Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3704136/","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/023b70db-da91-4a35-9d1f-9c90534f29d0?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101335","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-101335 — The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vuln…","description":"The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 1.58.1. This is due to the forminator_replace_quiz_form_data() helper invoking do_shortcode() on the fully expanded notificati…","indicators":{"cves":["CVE-2026-101335"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:27.933Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/forminator/tags/1.57.3/library/abstracts/abstract-class-front-action.php#L127","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/forminator/tags/1.57.3/library/helpers/helper-fields.php#L1476","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/forminator/tags/1.57.3/library/helpers/helper-fields.php#L1652","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/forminator/tags/1.57.3/library/helpers/helper-fields.php#L2965","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/forminator/tags/1.57.3/library/modules/quizzes/front/front-mail.php#L36","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3745883%40forminator&new=3745883%40forminator","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/27640d44-1474-416a-8efd-e9524f9d3c7f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103481","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103481 — The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p…","description":"The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…","indicators":{"cves":["CVE-2026-103481"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:28.080Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://codeberg.org/cyclotouriste/gwolle-gb/commit/f6e483654b56188a3fa208fd18a4f0468577a825","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/gwolle-gb/tags/5.1.1/frontend/gb-ajax-infinite-scroll.php#L96","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/gwolle-gb/tags/5.1.1/frontend/gb-permalink.php#L21","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/gwolle-gb/tags/5.1.1/frontend/gb-permalink.php#L28","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d8eff266-43fe-4636-b4ef-c973db7e7952?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103911","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103911 — The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is…","description":"The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.58.1. This is due to the software allowing users to execute an action that does not properly validate a value before…","indicators":{"cves":["CVE-2026-103911"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:28.460Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/forminator/tags/1.57.3/library/class-core.php#L167","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/forminator/tags/1.57.3/library/class-core.php#L290","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3745883%40forminator&new=3745883%40forminator","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/9d922a8f-611f-4586-b8ba-72d18d11a975?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109191","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109191 — The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress i…","description":"The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'image_hub_api_keys_* (6 options)' parameter. This makes it possible for authenticated attackers, wit…","indicators":{"cves":["CVE-2026-109191"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:28.967Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/image-hub/tags/1.2.0/image-hub.php#L46","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/image-hub/tags/1.2.0/inc/src/MediaModal.php#L19","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/image-hub/tags/1.2.0/inc/src/MediaModal.php#L38","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/image-hub/tags/1.2.0/inc/src/MediaModal.php#L56","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/image-hub/tags/1.2.0/inc/src/Settings.php#L23","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/image-hub/tags/1.2.0/inc/src/Settings.php#L78","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/image-hub/tags/1.2.0/inc/src/Utils.php#L11","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3745452/image-hub/trunk/inc/src/MediaModal.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/99d1e0cc-1fd0-47f7-8b73-33663ed72eea?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110019","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110019 — The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all…","description":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscribe…","indicators":{"cves":["CVE-2026-110019"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:29.850Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/io/hooks/AdminMenuHooks.php#L91","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/SuiteOAuthAuthorizeHandler.php#L11","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/SuiteRestApi.php#L416","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/TokenValidator.php#L30","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.1","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5b3f361-da53-42eb-b1fb-c0bfd641335b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110721","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110721 — The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary c…","description":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permission_callback => '__return_true', and the handler at PopupNotification::…","indicators":{"cves":["CVE-2026-110721"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:30.097Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Admin/Entries.php#L93","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Core/Rest/Popup.php#L186","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Core/Rest/Popup.php#L58","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Extensions/Extension.php#L668","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/notificationx/tags/3.3.3/includes/Extensions/PopupNotification/PopupNotification.php#L1161","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3746251/notificationx/trunk/includes/Extensions/PopupNotification/PopupNotification.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/84b5e044-4522-480a-ad14-8886ed691a86?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111106","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111106 — The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the…","description":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query…","indicators":{"cves":["CVE-2026-111106"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:30.223Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.31.4/app/API/Controllers/Admin/SegmentController.php#L41","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.31.4/app/API/Routes/Admin/SegmentRoute.php#L55","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.31.4/app/Internal/Admin/Segmentation/SegmentFilterService.php#L100","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.31.4/app/Internal/Admin/Segmentation/SegmentFilterService.php#L297","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.31.4/app/Internal/Admin/Segmentation/SegmentFilterService.php#L500","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/mail-mint/tags/1.31.4/app/Internal/Admin/Segmentation/SegmentFilterService.php#L797","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743638/mail-mint/trunk/app/Internal/Admin/Segmentation/SegmentFilterService.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7c492357-3293-49cf-9e4a-3e144b58b6f7?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96562","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96562 — The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in a…","description":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible…","indicators":{"cves":["CVE-2026-96562"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T05:17:30.687Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/broken-link-checker/tags/2.4.14.1/legacy/includes/containers.php#L298","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/broken-link-checker/tags/2.4.14.1/legacy/modules/containers/comment.php#L229","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/broken-link-checker/tags/2.4.14.1/legacy/modules/parsers/html_link.php#L72","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/broken-link-checker/tags/2.4.14.1/legacy/modules/parsers/image.php#L66","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3740705%40broken-link-checker&new=3740705%40broken-link-checker","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/04cc4b99-8c27-4f95-b860-608c01af843b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100158","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100158 — The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-a…","description":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible f…","indicators":{"cves":["CVE-2026-100158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:01.323Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/sql-chart-builder/tags/3.0.6/functions.php#L1019","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/sql-chart-builder/tags/3.0.6/functions.php#L1093","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/sql-chart-builder/tags/3.0.6/functions.php#L1101","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/sql-chart-builder/tags/3.0.6/functions.php#L579","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/sql-chart-builder/tags/3.0.6/functions.php#L820","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3725657%40sql-chart-builder&new=3725657%40sql-chart-builder","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/16375398-c5c9-465f-9a2f-4c08f76b090b?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103480","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103480 — The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerab…","description":"The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authentica…","indicators":{"cves":["CVE-2026-103480","CVE-2026-97470"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:02.673Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://downloads.wordpress.org/plugin/tourfic.3.0.2.zip","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tourfic/tags/3.0.0/inc/App/Shortcodes/Wishlist.php#L19","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tourfic/tags/3.0.0/inc/App/Shortcodes/Wishlist.php#L25","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/34466168-c03c-430e-9aba-daf718cbc9ad?source=cve","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tourfic/tags/2.23.5/inc/App/TF_Review.php#L154","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tourfic/tags/2.23.5/inc/Classes/Helper.php#L38","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tourfic/tags/2.23.5/inc/Traits/Action_Helper.php#L778","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/468451f8-699d-4bb9-9e34-f35a537ac522?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104001","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104001 — The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable t…","description":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running do_s…","indicators":{"cves":["CVE-2026-104001"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:05.180Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/elightup/slim-seo/pull/296","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.11.0/src/MetaTags/Data.php#L76","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.11.0/src/MetaTags/Helper.php#L168","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/slim-seo/tags/4.11.0/src/MetaTags/Helper.php#L26","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3742833%40slim-seo%2Ftags%2F4.11.2&old=3717070%40slim-seo%2Ftags%2F4.11.0","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7a7c53b9-e9b6-4337-9c89-326e66c4bd27?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109414","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109414 — The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL In…","description":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of su…","indicators":{"cves":["CVE-2026-109414"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:07.450Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.6.1/vendor/appsbd-wp/appsbd-lite/appsbd_lite/v6/core/class-basemodel.php#L2925","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.6.1/vitepos_lite/api/v1/class-pos-outlet-api.php#L66","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.6.1/vitepos_lite/api/v1/class-pos-purchase-api.php#L71","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.6.1/vitepos_lite/api/v1/class-pos-vendor-api.php#L74","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/vitepos-lite/tags/3.6.1/vitepos_lite/libs/class-api-base.php#L467","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3732582%40vitepos-lite&new=3732582%40vitepos-lite","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bb6c82b0-d9c7-4777-829d-885f24da4f36?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110017","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110017 — The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-…","description":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…","indicators":{"cves":["CVE-2026-110017"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:08.810Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/quick-paypal-payments/tags/6.0.4/legacy/quick-paypal-payments.php#L1546","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/quick-paypal-payments/tags/6.0.4/legacy/quick-paypal-payments.php#L1554","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/quick-paypal-payments/tags/6.0.4/legacy/quick-paypal-payments.php#L603","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/quick-paypal-payments/tags/6.0.4/legacy/quick-paypal-payments.php#L826","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3746507","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3746507/quick-paypal-payments/trunk/legacy/quick-paypal-payments.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/203f850e-1eed-4c49-b733-4ac2ce9b6772?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12272","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12272 — The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable…","description":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TC_DYNAMIC_SECURITY constant being hardcoded to a publicly known value. This makes it possible for una…","indicators":{"cves":["CVE-2026-12272"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:09.910Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3584811/lightweight-cookie-notice-free/trunk/public/class-daextlwcnf-public.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/54e53420-aa89-49d6-9632-cba066c46a51?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88963","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-88963 — The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based…","description":"The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirect_url' parameter in versions up to, and including, 4.0.8 This is due to insufficient input validation in the Topbar component's back button handler. This makes it…","indicators":{"cves":["CVE-2026-88963"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:11.930Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3700174/tutor/trunk/assets/js/tutor-order-details.js","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3700174%40tutor%2Ftags%2F4.0.9&old=3690454%40tutor%2Ftags%2F4.0.8","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f39a9570-a352-45f3-8644-2de2c1c709d2?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93767","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93767 — The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and in…","description":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, wh…","indicators":{"cves":["CVE-2026-93767"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:12.620Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L147","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L391","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L393","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tainacan/tags/1.3.0/classes/api/endpoints/class-tainacan-rest-background-processes-controller.php#L418","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3733197%40tainacan&new=3733197%40tainacan","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4ff75bf6-c8c3-43f5-bc71-0e54e892e664?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103696","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103696 — The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before us…","description":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.","indicators":{"cves":["CVE-2026-103696"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:07.973Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/3f3df5b4-bcb0-4d18-bd5d-88ce5582cd47/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104755","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104755 — The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Pri…","description":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the `start_comms` dispatcher (`wps_ic_comms::start_comms`), hooked on every front-end request, gates ac…","indicators":{"cves":["CVE-2026-104755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:08.413Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-compress-image-optimizer/tags/7.10.03/addons/criticalCss/criticalCss.php#L409","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-compress-image-optimizer/tags/7.10.03/classes/ajax.class.php#L816","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-compress-image-optimizer/tags/7.10.03/classes/comms.class.php#L1042","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-compress-image-optimizer/tags/7.10.03/classes/comms.class.php#L49","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-compress-image-optimizer/tags/7.10.03/classes/users.class.php#L30","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3734610%40wp-compress-image-optimizer%2Ftags%2F7.26.00&old=3723132%40wp-compress-image-optimizer%2Ftags%2F7.25.00","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/67e9bfb8-b274-422a-a50d-a6b6b24bb193?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105973","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105973 — The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks…","description":"The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and above) to alter the field structure of any form on the site, persistently breaking its public rendering.","indicators":{"cves":["CVE-2026-105973"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:08.730Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/913ac6d0-a2bc-4739-b99d-dad3eb4d2336/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105974","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105974 — The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before…","description":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email addresse…","indicators":{"cves":["CVE-2026-105974"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:08.837Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/ab69c0b2-e18d-495c-b6a3-546f4fe4c5d9/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107646","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107646 — The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensi…","description":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woof_settings[woof_stat][server_options]' parameter. This makes it possible for unauthenticated attackers to extract the…","indicators":{"cves":["CVE-2026-107646"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:08.940Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.svn.wordpress.org/woocommerce-products-filter/trunk/ext/turbo_mode/index.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/stat/views/tabs_content.php#L292","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/turbo_mode/index.php#L177","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/turbo_mode/index.php#L187","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/turbo_mode/index.php#L93","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1186aca4-012b-4512-9ab3-166b9f84d725?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107770","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107770 — The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization b…","description":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers…","indicators":{"cves":["CVE-2026-107770"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:09.253Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/admin.php#L155","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/admin.php#L56","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L116","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L201","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L309","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/api.php#L32","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wplr-sync/tags/6.5.6/classes/core.php#L923","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737477/wplr-sync","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3737477/wplr-sync/trunk/classes/api.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/2f32c361-9bb3-417b-a5a9-02e48bfa33b4?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109382","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109382 — The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosu…","description":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any l…","indicators":{"cves":["CVE-2026-109382"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:09.573Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/abilities/posts.php#L7","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/server/class-auth.php#L123","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/server/class-auth.php#L59","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/server/class-mcp-server.php#L78","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wsp-mcp-ai-agents-connector/tags/2.9.5/includes/tools/native-tools.php#L42","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3743711%40wsp-mcp-ai-agents-connector&new=3743711%40wsp-mcp-ai-agents-connector","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/809eb78f-fd8e-4434-a36b-bb8e313cf264?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109982","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109982 — The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capab…","description":"The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or validate a nonce on its migration actions, allowing any authenticated user, such as a subscriber, to trigger a one-way migration that creates published records and permanently deletes a…","indicators":{"cves":["CVE-2026-109982"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.030Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/27787d4e-1633-4eb6-bcf4-0a8586df3d47/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110012","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110012 — The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking RE…","description":"The Salon Booking System  WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.","indicators":{"cves":["CVE-2026-110012"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.140Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/7253eae4-4759-4388-8120-500b9d7352c4/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110013","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110013 — The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access to…","description":"The Salon Booking System  WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System  WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker abl…","indicators":{"cves":["CVE-2026-110013"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.253Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/613ddaa0-a44f-4dd7-b679-ba1319e15ca1/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110014","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110014 — The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization befor…","description":"The Salon Booking System  WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' store…","indicators":{"cves":["CVE-2026-110014"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.363Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/91598659-022c-4e04-ad16-399e11081053/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110179","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110179 — The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value aga…","description":"The affiliate-toolkit  WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-le…","indicators":{"cves":["CVE-2026-110179"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.807Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/fed6e817-c046-4749-b594-4ff12240f666/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110252","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110252 — The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in…","description":"The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removing WordPress's wp_filter_post_kses filter from content_save_pre immediately before calling wp_insert_post() with RSS feed content, wh…","indicators":{"cves":["CVE-2026-110252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:11.030Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/etruel/wpematico/commit/44c4894a0ad92a711c534ad4d822c0b5d7c3dffe","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/campaign_fetch.php#L400","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/campaign_fetch.php#L773","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/campaign_fetch.php#L777","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/wpematico_functions.php#L3226","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpematico/tags/2.9/includes/wpematico_functions.php#L3326","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3747465/wpematico/trunk/includes/campaign_fetch.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e87fc1bf-af05-4089-a164-8a2e73c68e8c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110290","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110290 — The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Script…","description":"The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes (parsed to inject instance_id) + undeclared is_widget' parameter in all versions up to, and including, 4.5.2 due to insufficient input sanitization and output escaping. T…","indicators":{"cves":["CVE-2026-110290"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:11.183Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/blocks/class-blocks.php#L128","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/blocks/class-blocks.php#L142","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/class-display.php#L153","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/frontend/class-display.php#L170","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.2/includes/util/class-helpers.php#L693","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/top-10/tags/4.5.3/includes/frontend/class-display.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3747022","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4db4a201-a7fa-4764-87cb-c54b64adf560?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110366","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110366 — Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incor…","description":"Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.4.","indicators":{"cves":["CVE-2026-110366"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:11.337Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/site-reviews/vulnerability/wordpress-site-reviews-plugin-8-3-4-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110664","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110664 — The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored C…","description":"The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note' parameter in all versions up to, and including, 7.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…","indicators":{"cves":["CVE-2026-110664"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:11.490Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Admin/Order/views/order-notes.php#L28","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Api/Endpoints/OrderEndpoint.php#L101","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Api/Endpoints/OrderEndpoint.php#L501","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wpdm-premium-packages/tags/7.2.8/src/Order/OrderService.php#L700","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3747528/wpdm-premium-packages/trunk/src/Admin/Order/views/order-notes.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/20042ecf-a8fd-4b36-80d9-d338c8795433?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111178","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111178 — The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection…","description":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer…","indicators":{"cves":["CVE-2026-111178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:11.960Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.1/includes/abstracts/abstract-class-object-db.php#L83","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.1/includes/base/admin/booking/class-bookings-outputter.php#L214","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.1/includes/base/admin/booking/functions-actions-booking.php#L219","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.1/includes/base/booking/class-object-db-bookings.php#L165","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?old=3732620&old_path=%2Fwp-booking-system%2Ftrunk&new=&new_path=%2Fwp-booking-system%2Ftrunk","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3736389%40wp-booking-system%2Ftags%2F2.1.0.2&old=3732637%40wp-booking-system%2Ftags%2F2.1.0.1","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12923175-4db4-4afc-9e9b-b9f139f24a79?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15222","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15222 — The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction…","description":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8. This is due to the software al…","indicators":{"cves":["CVE-2026-15222"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:12.120Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/changeset/3741339/user-registration/trunk/includes/class-ur-smart-tags.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f61873db-7365-41cb-a774-8f455a963d78?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19541","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19541 — Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t…","description":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secre…","indicators":{"cves":["CVE-2026-19541","CVE-2026-19601","CVE-2026-19603","CVE-2026-19600"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:12.520Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://mattermost.com/security-updates","label":"responsibledisclosure@mattermost.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19798","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19798 — The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a mi…","description":"The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the set_status() and bulk() functions in the Maps_Controller REST controller in versions up to, and including, 3.0.0. The plugin's permission_callback (can_edit()) only verif…","indicators":{"cves":["CVE-2026-19798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:13.217Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-map-block/tags/3.0.0/includes/Rest/Maps_Controller.php#L124","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-map-block/tags/3.0.0/includes/Rest/Maps_Controller.php#L237","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-map-block/tags/3.0.0/includes/Rest/Maps_Controller.php#L262","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-map-block/tags/3.0.0/includes/Rest/Maps_Controller.php#L63","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3730836%40wp-map-block&new=3730836%40wp-map-block","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b42f1f71-e272-48d4-9b3f-4360b287e16f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19867","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19867 — Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail t…","description":"Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to cap the number and size of mention keys stored in a user's notification properties, and to bound the quadratic multibyte-keyword matching performed for each post, which allows an authenticated user…","indicators":{"cves":["CVE-2026-19867"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:13.353Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://mattermost.com/security-updates","label":"responsibledisclosure@mattermost.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74923","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74923 — The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership che…","description":"The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed cont…","indicators":{"cves":["CVE-2026-74923"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:13.487Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://wpscan.com/vulnerability/23254461-f638-4fb7-817b-776c0db18a67/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91830","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-91830 — The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts…","description":"The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subscriber's management key and silently alter that subscriber's subscriptions.","indicators":{"cves":["CVE-2026-91830"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:13.700Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://wpscan.com/vulnerability/b2b1638a-f8af-49f7-86a6-a3eeea0526b1/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91833","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-91833 — The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter be…","description":"The WX Subscribe  微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.","indicators":{"cves":["CVE-2026-91833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:13.803Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://wpscan.com/vulnerability/1086b82e-1105-4484-a49b-456ed5f45bf8/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92427","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92427 — The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the sec…","description":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's signature check ineffective. This allows unauthenticated attackers to forge pay…","indicators":{"cves":["CVE-2026-92427"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:14.047Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://wpscan.com/vulnerability/a5320c81-5ad9-471d-9c58-726b585b801e/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100106","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100106 — The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site…","description":"The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'purchased_plan' parameter in all versions up to, and including, 1.34.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker…","indicators":{"cves":["CVE-2026-100106"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T08:17:11.207Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.34.2/assets/js/admin.js#L555","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.34.2/assets/js/tooltip.min.js#L4","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.34.2/vendor/freemius/wordpress-sdk/includes/class-freemius.php#L4548","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.34.2/vendor/freemius/wordpress-sdk/includes/fs-core-functions.php#L223","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.34.2/vendor/freemius/wordpress-sdk/includes/fs-html-escaping-functions.php#L123","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.34.2/vendor/freemius/wordpress-sdk/includes/managers/class-fs-admin-notice-manager.php#L421","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.34.2/vendor/freemius/wordpress-sdk/templates/admin-notice.php#L110","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3734423%40ajax-search-for-woocommerce%2Ftags%2F1.34.3&old=3684506%40ajax-search-for-woocommerce%2Ftags%2F1.34.2","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/7db3475a-3a70-4776-8ea3-337192f88973?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100108","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-100108 — The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…","description":"The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form (containing share_url)' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with s…","indicators":{"cves":["CVE-2026-100108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T08:17:12.320Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/share-button/tags/1.30/admin/review_notice.php#L26","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/share-button/tags/1.30/classes/blocks/network-block.php#L47","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/share-button/tags/1.30/classes/class-network.php#L275","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/share-button/tags/1.30/classes/class-social-networks.php#L370","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/share-button/tags/1.30/classes/class-social.php#L60","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3735252%40share-button&new=3735252%40share-button","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/bc098f5d-3c59-4046-bce8-ac2586e6da19?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96870","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96870 — The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cr…","description":"The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated at…","indicators":{"cves":["CVE-2026-96870"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T08:17:13.783Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/assets/js/minified/common.min.js#L58","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/core/routers/misc.php#L647","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/core/routes.php#L121","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/inc/functions/functions.php#L1037","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/inc/functions/functions.php#L1111","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/suredash/tags/1.12.0/inc/services/router.php#L127","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3721168%40suredash%2Ftags%2F1.12.1&old=3694773%40suredash%2Ftags%2F1.12.0","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/ece14f57-475d-4efc-8daf-52dfdaa12697?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104003","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104003 — The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Executio…","description":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the get_user_profile_structure() function assembling the front-end profile buffer — which includes raw comment excerpts inlined by author_com…","indicators":{"cves":["CVE-2026-104003"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:03.843Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://pastebin.com/raw/pCgrW6Pf","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-user-avatar/tags/4.17.5/src/Functions/GlobalFunctions.php#L1768","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-user-avatar/tags/4.17.5/src/ShortcodeParser/Builder/FrontendProfileBuilder.php#L169","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-user-avatar/tags/4.17.5/src/ShortcodeParser/FrontendProfileTag.php#L142","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-user-avatar/tags/4.17.5/src/Themes/DragDrop/UserProfile/DefaultTemplate.php#L379","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-user-avatar/tags/4.17.6/src/ShortcodeParser/FrontendProfileTag.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/83adfbff-f625-4474-81b9-961c496d59a0?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104726","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104726 — The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dir' Short…","description":"The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dir' Shortcode Attribute in all versions up to, and including, 1.34.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level acces…","indicators":{"cves":["CVE-2026-104726"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:03.980Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/name-directory/tags/1.34.3/shortcode.php#L284","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/name-directory/tags/1.34.3/shortcode.php#L344","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3723785%40name-directory&new=3723785%40name-directory","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6ea92622-60df-43ab-a106-56b769964a75?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15219","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15219 — Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Cos…","description":"Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers.\n\nThis issue affects Costifier: through 2026-10-16.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","indicators":{"cves":["CVE-2026-15219"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:04.663Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349","label":"iletisim@usom.gov.tr","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15575","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15575 — Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Produ…","description":"Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces.\n\nThis issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","indicators":{"cves":["CVE-2026-15575"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:04.790Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349","label":"iletisim@usom.gov.tr","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93681","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-93681 — The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cr…","description":"The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name Parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers…","indicators":{"cves":["CVE-2026-93681"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:05.107Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/GDPR/Controllers/UserConsent.php#L113","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/assets/js/tutor-admin.js#L21","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/classes/Student.php#L208","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.9/classes/Student.php#L217","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3730615%40tutor&new=3730615%40tutor","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3ff5cff8-ecca-4cde-b3f6-09ee49afea25?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107649","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107649 — The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'even…","description":"The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event[location_name]' parameter in all versions up to, and including, 3.2.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbi…","indicators":{"cves":["CVE-2026-107649"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:18:04.307Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/liedekef/events-made-easy/commit/3d9e92f98a9d9e443d65323ec8c86d598b3e34e0","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/includes/eme-fs.php#L831","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/includes/eme-fs.php#L867","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/includes/eme-locations.php#L3082","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/events-made-easy/tags/3.2.21/js/eme_show_maps.js#L208","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3748824%40events-made-easy%2Ftags%2F3.2.23&old=3723758%40events-made-easy%2Ftags%2F3.2.21","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f80a1fa2-d44b-4101-a891-fce21ee99427?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109118","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109118 — Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the…","description":"Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence (%2e%2e) in the request path, because the contain…","indicators":{"cves":["CVE-2026-109118"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T11:17:00.793Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://gitlab.com/ikus-soft/rdiffweb","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ikus-soft/rdiffweb/-/commit/04b7096566811feb7d782e38560b44044fa91a29","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ikus-soft/rdiffweb/-/work_items/392","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ikus-soft/rdiffweb/-/work_items/393","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ikus-soft/rdiffweb/-/work_items/394","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109930","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109930 — The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, tre…","description":"The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded visito…","indicators":{"cves":["CVE-2026-109930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:16:32.273Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://wpscan.com/vulnerability/45887eb3-93f9-4345-a72a-de627f23820c/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110029","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110029 — The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX act…","description":"The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX actions, allowing authenticated users with a role as low as Subscriber to revert any attachment to its backup copy and to permanently delete that backup and the plugin's generated WebP derivatives, regar…","indicators":{"cves":["CVE-2026-110029"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:16:32.387Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://wpscan.com/vulnerability/be39621f-99f3-489f-aa54-f96ca92e167a/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111390","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111390 — Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypas…","description":"Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal parameter of POST /erupt-api/data/table/{erupt}. Attackers holding query permission on entities with String-keyed linkTree…","indicators":{"cves":["CVE-2026-111390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:16:33.050Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/erupts/erupt","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/erupts/erupt/blob/2.3.0/erupt-core/src/main/java/xyz/erupt/core/service/EruptService.java#L62-L71","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/erupts/erupt/blob/2.3.0/erupt-core/src/main/java/xyz/erupt/core/util/TypeUtil.java#L107-L115","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/erupts/erupt/blob/2.3.0/erupt-data/erupt-data-jpa/src/main/java/xyz/erupt/jpa/dao/EruptJpaUtils.java#L210-L212","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/m0EK1XcGQfua6QHIXXNqMQ","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/erupt-through-2.3.0-hql-injection-via-linktreeval-in-data-table-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110896","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110896 — Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorre…","description":"Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.","indicators":{"cves":["CVE-2026-110896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:55.010Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/content-protector/vulnerability/wordpress-passster-plugin-4-3-18-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110900","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110900 — Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorr…","description":"Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.","indicators":{"cves":["CVE-2026-110900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:55.130Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/bookit/vulnerability/wordpress-bookit-plugin-2-6-0-5-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110901","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110901 — Authorization Bypass Through User-Controlled Key vulnerability in WPMU DEV SmartCrawl smartcrawl-seo…","description":"Authorization Bypass Through User-Controlled Key vulnerability in WPMU DEV SmartCrawl smartcrawl-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SmartCrawl: from n/a through 3.16.4.","indicators":{"cves":["CVE-2026-110901"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:55.250Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/smartcrawl-seo/vulnerability/wordpress-smartcrawl-plugin-3-16-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111397","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111397 — Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-v…","description":"Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.","indicators":{"cves":["CVE-2026-111397"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:55.617Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-16-1-sensitive-data-exposure-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111409","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111409 — Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal…","description":"Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.61.0.","indicators":{"cves":["CVE-2026-111409"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:56.077Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/yith-paypal-express-checkout-for-woocommerce/vulnerability/wordpress-yith-paypal-express-checkout-for-woocommerce-plugin-1-61-0-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111555","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111555 — A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capa…","description":"A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with vali…","indicators":{"cves":["CVE-2026-111555"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:56.620Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-111555","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554026","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105664","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105664 — The endpoint exposes an observable response discrepancy when processing ID values. A request submitt…","description":"The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker holding a valid access token - but without further authentication o…","indicators":{"cves":["CVE-2026-105664"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:14.903Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://eseecloud.app/","label":"ics-cert@hq.dhs.gov","domainType":"other"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110287","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110287 — Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allow…","description":"Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.","indicators":{"cves":["CVE-2026-110287"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:22.020Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://devolutions.net/security/advisories/DEVO-2026-0036/","label":"security@devolutions.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110804","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110804 — Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2…","description":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a ch…","indicators":{"cves":["CVE-2026-110804"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:22.247Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://devolutions.net/security/advisories/DEVO-2026-0036/","label":"security@devolutions.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110806","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110806 — Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an…","description":"Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data.","indicators":{"cves":["CVE-2026-110806"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:22.443Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://devolutions.net/security/advisories/DEVO-2026-0036/","label":"security@devolutions.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-90821","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-90821 — An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller a…","description":"An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input","indicators":{"cves":["CVE-2026-90821"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:19:10.960Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://gitlab.com/crafty-controller/crafty-4/-/work_items/745","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97858","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97858 — An attacker can cause the server to unbind the target device from its current owner and rebind it to…","description":"An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.","indicators":{"cves":["CVE-2026-97858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:19:36.597Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://eseecloud.app/","label":"ics-cert@hq.dhs.gov","domainType":"other"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107777","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107777 — Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authent…","description":"Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account.","indicators":{"cves":["CVE-2026-107777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:05.977Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf","label":"ics-cert@hq.dhs.gov","domainType":"other"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-01.json","label":"ics-cert@hq.dhs.gov","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-01","label":"ics-cert@hq.dhs.gov","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111728","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111728 — Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper au…","description":"Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper authorization, allowing unauthenticated LAN or Tailnet clients to bypass the privileged mediastream settings guard by setting transcodeHwAccel to custom and supplying attacker-controlled decodeFlags and…","indicators":{"cves":["CVE-2026-111728"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:17:15.190Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/5rahim/seanime","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/5rahim/seanime/commit/d7b13706da236473f33163b1222eb09587e93388","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/seanime-argument-injection-via-transcodehwaccelcustomsettings","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-54657","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-54657 — Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.0.0 unti…","description":"Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.0.0 until 1.27.2, 1.28.2, and 1.29.0, the POST search endpoints /zaken/api/v1/zaken/_zoek and /documenten/api/v1/enkelvoudiginformatieobjecten/_zoek do not filter result querysets according to the authorizati…","indicators":{"cves":["CVE-2026-54657"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:43.590Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/open-zaak/open-zaak/commit/15456f1a0ef4b0abf1b1c0e3a16c99c15423b9fd","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/commit/4b429d3243d1532f6fe731f932a201cf0ddc4c18","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/commit/d3869af98c60570782f867bab3e1d14fd8d8330f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/releases/tag/1.27.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/releases/tag/1.28.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/releases/tag/1.29.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/security/advisories/GHSA-f29q-7rpr-jmjx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55836","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55836 — Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 unt…","description":"Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 until 1.27.2, 1.28.2, and 1.29.0, _import_document_row in src/openzaak/components/documenten/tasks.py uses the attacker-controlled bestandspad CSV field without ensuring that the resolved path remains un…","indicators":{"cves":["CVE-2026-55836"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:43.897Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/open-zaak/open-zaak/commit/4b23957b55ab792bc2ba1fbc5ce6918881b62ab8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/commit/69c78ce2a0edb45bec8809bc2205585c5f8a4054","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/commit/8acd5e59e0132aa19284bf22f7b3defca279e2ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/releases/tag/1.27.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/releases/tag/1.28.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/releases/tag/1.29.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/security/advisories/GHSA-x5cj-23hr-5r54","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/open-zaak/open-zaak/security/advisories/GHSA-x5cj-23hr-5r54","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55862","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55862 — pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multi…","description":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and ixmlNode_getEle…","indicators":{"cves":["CVE-2026-55862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:44.060Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/pupnp/pupnp/commit/82ccaec7ab6b1258ea1ac66374d8940712ccd4c4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/releases/tag/release-2.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57447","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-57447 — Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the…","description":"Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for private messages or restricted category topics without enforcing the viewer's authorization. A user who can edit the inde…","indicators":{"cves":["CVE-2026-57447"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:44.357Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/discourse/discourse-doc-categories/commit/b15d4de02ad29d7c9525346afee51fef4a2c605a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/discourse/discourse-doc-categories/security/advisories/GHSA-x63p-48vw-8r64","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96425","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96425 — Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as…","description":"Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus","indicators":{"cves":["CVE-2026-96425"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:22:52.693Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-unauthenticated-arbitrary-file-read-as-root-in-lomiri-download-manager","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/5fd50939a3cacef4181f6bcb58796bdcbc17984d","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items/17","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-62362","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-62362 — PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customiza…","description":"PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules. From 5.0.0 until 9.3.15, the /api/statistic/analysis/field endpoint accepts a crafted field query parameter from an authenticated user and passes it to countField or sumField. The…","indicators":{"cves":["CVE-2026-62362"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:35.720Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/PBH-BTN/PeerBanHelper/commit/bec34c8b93c6ea3a3bc2ad992aedd41b95cd400a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/PBH-BTN/PeerBanHelper/releases/tag/v9.3.15","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/PBH-BTN/PeerBanHelper/security/advisories/GHSA-pc89-mfwm-hj9x","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102552","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-102552 — Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTO…","description":"Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply.\n\n\n\nTo remediate this issue, users should upgrade to version V4.4.…","indicators":{"cves":["CVE-2026-102552"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:14.893Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-139-aws/","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"other"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.2","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"},{"url":"https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-h4fw-pv82-p7h5","label":"ff89ba41-3aa1-4d27-914a-91399e9639e5","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109461","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109461 — Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorize…","description":"Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":["CVE-2026-109461"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:31.150Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109461","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109838","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109838 — IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper…","description":"IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature.","indicators":{"cves":["CVE-2026-109838"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:31.587Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292486","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111392","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111392 — SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, al…","description":"SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or c…","indicators":{"cves":["CVE-2026-111392"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:38.950Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/managers/io_struct.py#L205-L215","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/managers/tokenizer_manager.py#L1183-L1215","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/44641","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/pull/44653","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sglang-through-0.5.21-kv-cache-poisoning-via-mm-hashes-in-generate","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/sgl-project/sglang/issues/44641","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111603","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111603 — PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allo…","description":"PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the course details and a…","indicators":{"cves":["CVE-2026-111603"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:39.220Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/PlayEdu/PlayEdu","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/PlayEdu/PlayEdu/blob/2.3/playedu-api/playedu-api/src/main/java/xyz/playedu/api/controller/frontend/CourseController.java#L57-L132","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/playedu-course-attachment-cross-department-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/playedu-through-2.3-missing-authorization-via-student-coursecontroller-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111610","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111610 — B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allow…","description":"B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author ownership checks. Attackers can query the console articles status endpoint to list other authors' drafts, probe draft c…","indicators":{"cves":["CVE-2026-111610"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:40.240Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/88250/solo","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/88250/solo/blob/v4.4.0/src/main/java/org/b3log/solo/processor/console/ArticleConsole.java#L87-L92","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/88250/solo/blob/v4.4.0/src/main/java/org/b3log/solo/service/ArticleQueryService.java#L485-L519","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/solo-article-console-cross-author-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/b3log-solo-through-4.4.0-missing-authorization-in-articleconsole","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/solo-article-console-cross-author-authz","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111611","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111611 — roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability t…","description":"roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders or…","indicators":{"cves":["CVE-2026-111611"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:40.383Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/roncoo/roncoo-education","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/roncoo/roncoo-education/blob/v25.0.0-RELEASE/roncoo-education-service/roncoo-education-service-user/src/main/java/com/roncoo/education/user/service/auth/biz/AuthOrderPayBiz.java#L131-L231","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/roncoo-education-auth-order-cancel-continue-missing-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/roncoo-education-through-25.0.0-release-idor-via-order-pay-cancel-and-continue-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111614","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111614 — DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseControlle…","description":"DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snipp…","indicators":{"cves":["CVE-2026-111614"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:40.833Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/BaseController.java#L91-L95","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/datacap/service/service/BaseService.java#L38-L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/datacap-through-2025.1.1-idor-via-basecontroller-getinfoforpath-exposes-credentials","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111615","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111615 — Mall4cloud through 4.0 contains an insecure direct object reference vulnerability that allows authen…","description":"Mall4cloud through 4.0 contains an insecure direct object reference vulnerability that allows authenticated merchants to read other shops' buyer shipping addresses via the multishop OrderController getOrderAddr handler. Attackers can enumerate auto-increment orderAddrId values in GET /m/order/order_…","indicators":{"cves":["CVE-2026-111615"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:40.977Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/gz-yami/mall4cloud/blob/v4.0/mall4cloud-order/src/main/java/com/mall4j/cloud/order/controller/multishop/OrderController.java#L75-L80","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gz-yami/mall4cloud/blob/v4.0/mall4cloud-order/src/main/resources/mapper/OrderAddrMapper.xml#L27-L29","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/mall4cloud-multishop-order-addr-cross-shop-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/mall4cloud-through-4.0-idor-exposing-buyer-addresses-via-order-addr-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/mall4cloud-multishop-order-addr-cross-shop-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111616","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111616 — Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController…","description":"Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settings. Attackers with the Administrators role on one site can request another site's entityId through their own alias to re…","indicators":{"cves":["CVE-2026-111616"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:41.113Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/oqtane/oqtane.framework/blob/v10.2.6/Oqtane.Server/Controllers/SettingController.cs#L411-L516","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/oqtane-setting-site-cross-site-private-settings-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/oqtane-framework-through-10.2.6-cross-site-settings-disclosure-via-setting-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111617","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111617 — WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated…","description":"WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints because UiAutomationConsumer accepts every connection. Attackers can register an actuator with a client-supplied id to…","indicators":{"cves":["CVE-2026-111617"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:41.250Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/ui_automation/consumers.py#L129-L186","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/MGdaasLab/WHartTest/blob/v2.8.1/WHartTest_Django/wharttest_django/asgi.py#L41-L53","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/wharttest-ui-automation-websocket-missing-authentication","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wharttest-through-2.8.1-missing-authentication-on-ui-automation-websocket-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/wharttest-ui-automation-websocket-missing-authentication","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111618","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111618 — CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the genera…","description":"CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attackers can supply ../ sequences in hash to download any readable .tar.gz or .zip file, including other users' generated arc…","indicators":{"cves":["CVE-2026-111618"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:41.393Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/coaidev/coai/blob/v4.0.0/addition/article/api.go#L25-L35","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/coaidev/coai/blob/v4.0.0/addition/generation/api.go#L19-L29","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/coai-chatnio-generation-article-download-path-traversal","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/coai-through-4.0.0-unauthenticated-path-traversal-via-archive-download-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111619","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111619 — FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privil…","description":"FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. Attackers can use blind boolean or time-based subqueries in dzz/pichome/library/filelist.php and dzz/collection/filelis…","indicators":{"cves":["CVE-2026-111619"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:41.540Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/zyx0814/FilePress","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zyx0814/FilePress/blob/3.0.1/dzz/collection/filelist.php#L453-L496","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zyx0814/FilePress/blob/3.0.1/dzz/pichome/library/filelist.php#L594-L642","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zyx0814/FilePress/blob/3.0.1/dzz/pichome/library/filelist.php#L93","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/filepress-pichome-library-orderby-sqli","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/filepress-through-3.0.1-sql-injection-via-asc-parameter-in-filelist-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111620","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111620 — O2OA through 10.0.2-ce contains an authorization bypass vulnerability in x_processplatform_assemble_…","description":"O2OA through 10.0.2-ce contains an authorization bypass vulnerability in x_processplatform_assemble_surface that allows authenticated users to download attachments from other works. ActionDownloadWithWork and ActionDownloadWithWorkStream never verify that the requested attachment id belongs to the r…","indicators":{"cves":["CVE-2026-111620"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:41.690Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/o2oa/o2oa","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/o2oa/o2oa/blob/10.0.2-ce/o2server/x_processplatform_assemble_surface/src/main/java/com/x/processplatform/assemble/surface/jaxrs/attachment/ActionDownloadWithWork.java#L44-L95","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/o2oa/o2oa/blob/10.0.2-ce/o2server/x_processplatform_assemble_surface/src/main/java/com/x/processplatform/assemble/surface/jaxrs/attachment/ActionDownloadWithWorkStream.java#L45-L64","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/o2oa-processplatform-attachment-download-work-cross-work-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/o2oa-through-10.0.2-ce-cross-work-attachment-read-via-attachment-download-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/o2oa-processplatform-attachment-download-work-cross-work-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111621","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111621 — TDuck Survey Form through 5.3 contains a missing authorization vulnerability that allows any authent…","description":"TDuck Survey Form through 5.3 contains a missing authorization vulnerability that allows any authenticated user to read other owners' raw form settings via GET /user/form/setting/{key}. Attackers can supply the 8-character form key from a public fill link to obtain the form write password, owner not…","indicators":{"cves":["CVE-2026-111621"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:41.837Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/TDuckCloud/tduck-survey-form","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/TDuckCloud/tduck-survey-form/blob/5.3/tduck-api/src/main/java/com/tduck/cloud/api/web/controller/UserFormSettingController.java#L66-L75","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/TDuckCloud/tduck-survey-form/commit/984efd69f51778e3d1a9ea0feb0f7c9aed266c18","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/tduck-survey-form-setting-cross-user-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/tduck-survey-form-through-5.3-missing-authorization-via-user-form-setting-key","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111622","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111622 — smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows un…","description":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter. Attackers can send crafted /login links to users with active SSO sessions, then redeem st…","indicators":{"cves":["CVE-2026-111622"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:41.980Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/a466350665/smart-sso","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/a466350665/smart-sso/blob/1.6.0/smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/LoginController.java#L50-L59","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/a466350665/smart-sso/blob/1.6.0/smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/Oauth2Controller.java#L55-L84","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/a466350665/smart-sso/blob/2.1.1/smart-sso-server/src/main/java/com/smart/sso/server/controller/LoginController.java#L53-L63","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/smart-sso-oauth2-code-leak-open-redirect","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/smart-sso-through-2.1.1-oauth2-authorization-code-theft-via-unvalidated-redirecturi","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/smart-sso-oauth2-code-leak-open-redirect","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111623","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111623 — Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows…","description":"Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role system…","indicators":{"cves":["CVE-2026-111623"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:42.133Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/joey-zhou/xiaozhi-esp32-server-java","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/joey-zhou/xiaozhi-esp32-server-java/blob/v6.1.0/xiaozhi-common/src/main/java/com/xiaozhi/communication/auth/DeviceAuthService.java#L76-L81","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/joey-zhou/xiaozhi-esp32-server-java/blob/v6.1.0/xiaozhi-server/src/main/java/com/xiaozhi/device/DeviceAppService.java#L298-L346","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/joey-zhou/xiaozhi-esp32-server-java/blob/v6.1.0/xiaozhi-server/src/main/java/com/xiaozhi/device/DeviceController.java#L142-L153","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/xiaozhi-esp32-server-java-ota-device-token-issuance","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/xiaozhi-esp32-server-java-through-6.1.0-authentication-bypass-via-ota-endpoint-token-issuance","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111625","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111625 — 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that all…","description":"10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level multisite users to publish posts on other network sites. Attackers can use the dt-push nonce with a chosen connection id and postStatus to create draft or published posts on site…","indicators":{"cves":["CVE-2026-111625"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:42.437Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/10up/distributor/blob/2.3.1/includes/push-ui.php#L252-L357","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/commit/c80eaead0a686891045aed43e94fb38bdb9f218f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/releases/tag/2.3.2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/security/advisories/GHSA-26j8-r2m4-768c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/10up-distributor-before-2.3.2-missing-authorization-via-dt-push-ajax-action","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111628","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111628 — 10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-…","description":"10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post meta. Attackers can store a serialized PHP string as meta, which set_meta() in includes/utils.php unserializes on the de…","indicators":{"cves":["CVE-2026-111628"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:42.907Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/10up/distributor/blob/2.3.1/includes/utils.php#L192-L200","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/commit/7c57edb774d80534885ca6f2c46b95d333de6e5a","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/releases/tag/2.3.2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/security/advisories/GHSA-wm53-9j85-ph6h","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/10up-distributor-before-2.3.2-php-object-injection-via-set-meta","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111629","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111629 — IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any au…","description":"IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any authenticated user to read other tenants' data because Customers and Devices API handlers do not scope queries to the caller's tenant. Attackers can self-register through the anonymous AccountController…","indicators":{"cves":["CVE-2026-111629"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:43.043Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/IoTSharp/IoTSharp/blob/v3.6.1/IoTSharp/Controllers/CustomersController.cs#L164-L177","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/IoTSharp/IoTSharp/blob/v3.6.1/IoTSharp/Controllers/DevicesController.cs#L490-L507","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/iotsharp-devices-customers-cross-tenant-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/iotsharp-through-3.6.1-cross-tenant-data-exposure-via-customers-and-devices-apis","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111630","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111630 — abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in t…","description":"abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access other users' AI chat conversations by supplying their ConversationId. Attackers holding the Chat permission can call ChatAp…","indicators":{"cves":["CVE-2026-111630"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:43.190Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/colinin/abp-next-admin/blob/10.6.0/aspnet-core/modules/ai/LINGYUN.Abp.AIManagement.Application/LINGYUN/Abp/AIManagement/Chats/ChatAppService.cs#L27-L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/colinin/abp-next-admin/blob/10.6.0/aspnet-core/modules/ai/LINGYUN.Abp.AIManagement.Domain/LINGYUN/Abp/AIManagement/Chats/ConversationStore.cs#L49-L66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/abp-next-admin-aimanagement-chat-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/abp-next-admin-10.2.0-through-10.6.0-idor-in-aimanagement-chat-conversations","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/abp-next-admin-aimanagement-chat-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111631","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111631 — Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-leve…","description":"Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage_options users. Attackers can call dt_verify_external_connection with a chosen endpointId and url to send stored connection creden…","indicators":{"cves":["CVE-2026-111631"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:43.330Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/10up/distributor/blob/2.3.1/includes/external-connection-cpt.php#L231-L263","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/blob/2.3.1/includes/external-connection-cpt.php#L716-L734","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/commit/71542b924fdd446a4183f32b928388d286ae5bb3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/releases/tag/2.3.2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/10up/distributor/security/advisories/GHSA-pxgv-j98h-3xhw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/distributor-before-2.3.2-missing-authorization-in-external-connection-ajax-actions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111632","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111632 — Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated AP…","description":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or i…","indicators":{"cves":["CVE-2026-111632"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:43.470Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/aureuserp/aureuserp/blob/v1.6.0/plugins/webkul/partners/src/Http/Requests/PartnerRequest.php#L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/blob/v1.6.0/plugins/webkul/support/src/Traits/BelongsToCompany.php#L10-L19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/commit/5dab06a958d1e7546cf9f2ebf48f9843909ed972","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/HygpHMknGl","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aureus-erp-through-1.6.0-multi-company-authorization-bypass-via-company-id","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@leediay/HygpHMknGl","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111635","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111635 — Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated view…","description":"Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension such…","indicators":{"cves":["CVE-2026-111635"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:43.883Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/helicalinsight/helicalinsight/blob/v7.0.0/server/core/src/main/java/com/helicalinsight/efw/controller/EFWController.java#L547-L557","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/helicalinsight-efwd-parameter-sqli","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/helical-insight-through-7.0.0-path-traversal-via-getexternalresource","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/helicalinsight-efwd-parameter-sqli","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111637","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111637 — NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated at…","description":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve n…","indicators":{"cves":["CVE-2026-111637"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:44.157Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/Blair2004/NexoPOS/blob/v6.2.4/app/Providers/FormsProvider.php#L126-L152","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Blair2004/NexoPOS/blob/v6.2.4/routes/api-base.php#L10-L18","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/nexopos-fields-endpoint-unauthenticated-transaction-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/nexopos-through-6.2.4-unauthenticated-transaction-disclosure-via-api-fields-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/nexopos-fields-endpoint-unauthenticated-transaction-disclosure","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111640","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111640 — DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialo…","description":"DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'. Authenticated users can supply the dialog_id of OKR comment dialogs to msg__list, msg__one, or msg__send* endpoints to read and i…","indicators":{"cves":["CVE-2026-111640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:44.587Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/kuaifan/dootask/blob/v1.9.66/app/Models/WebSocketDialog.php#L976-L978","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/dootask-okr-dialog-missing-membership-check","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/dootask-through-1.9.66-missing-authorization-in-okr-comment-dialogs","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/dootask-okr-dialog-missing-membership-check","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111645","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111645 — MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDo…","description":"MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDoc API that allows authenticated users to modify other users' documents and projects. Attackers can send PUT requests with arbitrary sort_data document ids to publish private drafts and reparent docume…","indicators":{"cves":["CVE-2026-111645"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:45.303Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/zmister2016/MrDoc/blob/v1.1.1/app_doc/views_import.py#L165-L182","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/mrdoc-import-local-doc-api-missing-authz-cross-user-publish","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/mrdoc-through-1.1.1-missing-authorization-via-api-import-local-doc-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/mrdoc-import-local-doc-api-missing-authz-cross-user-publish","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111646","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111646 — SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated…","description":"SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/{attachmentId}. Attackers who know or derive time-ordered snowflake file ids can bypass shared, owner, and project checks in…","indicators":{"cves":["CVE-2026-111646"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:45.440Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/javahuang/SurveyKing","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/api/src/main/java/cn/surveyking/server/api/SurveyApi.java#L99-L107","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/javahuang/SurveyKing/blob/6e1fdd59f9b331ac90a26402ac86a002cc9155a9/server/rdbms/src/main/java/cn/surveyking/server/impl/FileServiceImpl.java#L197-L228","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/javahuang/SurveyKing/commit/9489171d53e55ace2856a91af38034665c0064a4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/surveyking-public-preview-unauth-file-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/surveyking-before-1.13.0-unauthenticated-file-download-via-api-public-preview","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111647","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111647 — PickMall lilishop through 5.0.0 contains an insecure direct object reference vulnerability that allo…","description":"PickMall lilishop through 5.0.0 contains an insecure direct object reference vulnerability that allows authenticated buyers to read other buyers' invoice records because ReceiptServiceImpl.getDetail performs no ownership check. Attackers can supply another buyer's receipt id to GET /buyer/trade/rece…","indicators":{"cves":["CVE-2026-111647"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:45.597Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/lilishop/lilishop","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lilishop/lilishop/blob/5aa1c7ef04bb9178d8ddd535c3bbbd38a6fe1ccd/buyer-api/src/main/java/cn/lili/controller/order/ReceiptBuyerController.java#L33-L37","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lilishop/lilishop/blob/5aa1c7ef04bb9178d8ddd535c3bbbd38a6fe1ccd/framework/src/main/java/cn/lili/modules/order/order/serviceimpl/ReceiptServiceImpl.java#L40-L43","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/lilishop-buyer-receipt-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/pickmall-lilishop-through-5.0.0-idor-via-buyer-trade-receipt-id","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/lilishop-buyer-receipt-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111649","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111649 — Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability i…","description":"Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential post_content ids via the /v1/attachment endpoint to…","indicators":{"cves":["CVE-2026-111649"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:45.897Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/rocboss/paopao-ce","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rocboss/paopao-ce/blob/v0.6.0-alpha.3/internal/servants/web/priv.go#L208-L250","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/paopao-ce-attachment-download-cross-user-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rocboss-paopao-ce-through-0.6.0-alpha.3-idor-via-downloadattachment-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111651","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111651 — Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the…","description":"Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any tenant's personnel directory. Attackers can supply another tenant's tenantId to exportLoginXLS or exportNotLoginXLS to obta…","indicators":{"cves":["CVE-2026-111651"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:46.217Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/risesoft-y9/Digital-Infrastructure","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-log/risenet-y9boot-support-log-web/src/main/java/net/risesoft/controller/DownloadController.java#L47-L82","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/digital-infrastructure-log-download-cross-tenant-person-export","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/risesoft-digital-infrastructure-through-9.6.11-cross-tenant-data-exposure-via-downloadcontroller","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111652","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111652 — Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController.Attachm…","description":"Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController.Attachment that allows unauthenticated attackers to download project image and video attachments. Attackers can request known or derived /attachment/* paths for .jpg, .png, .bmp, or .mp4 files, which are ser…","indicators":{"cves":["CVE-2026-111652"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:46.360Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/3xxx/engineercms","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/3xxx/engineercms/blob/v2.0.5/controllers/attachment.go#L1705-L1706","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/engineercms-attachment-image-mp4-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/engineercms-through-2.0.5-missing-authorization-via-attachcontroller-attachment","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/engineercms-attachment-image-mp4-missing-authz","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111653","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111653 — 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated at…","description":"53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/enterprises/:id. Because UpdateEnterprise only enforces checks when IS_SAAS is true, attackers can enumerate sequential en…","indicators":{"cves":["CVE-2026-111653"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:46.513Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/53AI/53AIHub/blob/v0.5.3/api/controller/enterprise.go#L122-L160","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/53AI/53AIHub/blob/v0.5.3/api/router/api.go#L54-L66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/53aihub-unauth-cross-tenant-enterprise-update","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/53aihub-through-0.5.3-missing-authentication-via-put-api-enterprises-id","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111654","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111654 — FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authent…","description":"FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupController queries lack owner checks. Attackers, including self-registered users, can supply sequential group IDs to read,…","indicators":{"cves":["CVE-2026-111654"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:46.660Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/GroupController.java#L70-L137","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-service/fastbee-iot-service/src/main/java/com/fastbee/iot/service/impl/GroupServiceImpl.java#L37-L143","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kerwincui/FastBee/blob/v2.1.0/springboot/fastbee-service/fastbee-iot-service/src/main/resources/mapper/iot/GroupMapper.xml#L36-L109","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/fastbee-device-group-cross-user-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fastbee-through-2.1.0-idor-via-iot-group-by-id-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111656","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111656 — ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authen…","description":"ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to access another tenant's form filters by supplying arbitrary form_id values. Attackers can send sequential form_id values to getFormFilterList, getFormFilterInfo and updateFormFilterSo…","indicators":{"cves":["CVE-2026-111656"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:46.940Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/zhimaAi/chatwiki/blob/v2.9.6/internal/app/chatwiki/business/manage/form.go#L1192-L1242","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zhimaAi/chatwiki/blob/v2.9.6/internal/app/chatwiki/business/manage/form.go#L878-L990","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/chatwiki-form-filter-cross-tenant-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/chatwiki-through-2.9.6-cross-tenant-idor-via-form-filter-management-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111657","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111657 — BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsS…","description":"BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of RmaController that allows authenticated customers to modify other customers' returns. Attackers can submit sequential RMA ids to the account/rmas/{id}/mark_as_shipped endpoint to ove…","indicators":{"cves":["CVE-2026-111657"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:47.083Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/beikeshop/beikeshop/blob/v2.0.0.31/beike/Shop/Http/Controllers/Account/RmaController.php#L67-L93","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/beikeshop/beikeshop/blob/v2.0.0.31/beike/Shop/Routes/shop.php#L98-L111","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/beikeshop-rma-mark-as-shipped-missing-ownership-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/beikeshop-through-2.0.0.31-idor-via-rma-mark-as-shipped-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/beikeshop-rma-mark-as-shipped-missing-ownership-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111659","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111659 — Waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthentica…","description":"Waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to forge orders by calling the internal /callback/order/submit message-queue callback. Attackers can supply arbitrary userId, addressId and cart ids in the order JSON to create orders fo…","indicators":{"cves":["CVE-2026-111659","CVE-2026-111660","CVE-2026-111661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:47.367Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-common/src/main/java/com/wayn/common/core/service/shop/impl/MobileOrderServiceImpl.java#L225-L307","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/callback/SubmitOrderController.java#L34-L39","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/framework/config/SecurityConfig.java#L66","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/waynboot-mall-unauth-callback-order-forgery-cancel-mail-relay","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-unauthenticated-order-forgery-via-callback-order-submit","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-common/src/main/java/com/wayn/common/core/service/shop/impl/OrderUnpaidServiceImpl.java#L36-L69","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/callback/UnpaidOrderController.java#L26-L30","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-missing-authentication-via-callback-order-unpaid","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/wayn111/waynboot-mall/blob/v2.0.0/waynboot-mobile-api/src/main/java/com/wayn/mobile/api/controller/callback/EmailController.java#L32-L42","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/waynboot-mall-through-2.0.0-missing-authentication-via-callback-email-mail-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111664","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111664 — Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileg…","description":"Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses version…","indicators":{"cves":["CVE-2026-111664"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:48.210Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/safing/portmaster/blob/v2.2.3/service/core/api.go#L145-L159","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/safing/portmaster/commit/f943e1eaf98f45bc48490bf288e1d63c04929ae0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/safing/portmaster/issues/2292","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/safing/portmaster/releases/tag/v2.2.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/safing-portmaster-before-2.2.5-unauthenticated-forced-downgrade-via-api-v1-updates-from-url","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111665","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111665 — Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager Langu…","description":"Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController that allows any authenticated manager user to list, create, edit and delete site languages without the granular Language, LanguageAdd, LanguageEdit or LanguageDelete permissions. Atta…","indicators":{"cves":["CVE-2026-111665"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:48.363Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/PiranhaCMS/piranha.core/blob/v12.2/core/Piranha.Manager/Controllers/LanguageApiController.cs#L21-L89","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/PiranhaCMS/piranha.core/blob/v12.2/core/Piranha.Manager/Services/LanguageService.cs#L84-L110","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/piranha-cms-manager-language-api-missing-permission","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/piranha-cms-through-12.2-missing-authorization-in-manager-language-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/piranha-cms-manager-language-api-missing-permission","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111666","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111666 — Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows a…","description":"Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the reports object. Because objectql's callAdapter skips space filtering for enable_space_global objects on find/findOne, attac…","indicators":{"cves":["CVE-2026-111666"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:48.507Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/steedos/steedos-platform/blob/v3.0.15-beta.51/packages/objectql/src/types/object.ts#L2899-L2913","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/steedos/steedos-platform/blob/v3.0.15-beta.51/services/service-core-objects/main/default/objects/reports.object.yml#L4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/steedos-platform-reports-cross-tenant-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/steedos-platform-through-3.0.15-beta.51-cross-tenant-information-disclosure-via-reports-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111667","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111667 — REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commen…","description":"REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a private project to the /project/comments/list e…","indicators":{"cves":["CVE-2026-111667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:48.660Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/getrebuild/rebuild/blob/4.5.0/src/main/java/com/rebuild/web/project/TaskCommentController.java#L37-L62","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/getrebuild-rebuild-project-task-comment-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rebuild-through-4.5.0-missing-authorization-via-project-comments-list-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/getrebuild-rebuild-project-task-comment-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111668","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111668 — AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py t…","description":"AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /top-users and /budget to read organizatio…","indicators":{"cves":["CVE-2026-111668"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:48.790Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/beizhu-1209/AIHelms/blob/0.1.25/apps/api/v1/efficiency.py#L284-L307","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/beizhu-1209/AIHelms/blob/0.1.25/apps/api/v1/efficiency.py#L436-L447","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/aihelms-efficiency-analytics-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aihelms-through-0.1.25-missing-authorization-in-efficiency-analytics-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111669","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111669 — ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attacke…","description":"ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attackers to manipulate the ORDER BY clause by supplying a crafted PagerInfo.Sort query parameter to the shared ToPage paging helper. Attackers holding the system:user:list permission can inject subquery or…","indicators":{"cves":["CVE-2026-111669"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:49.080Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://gitee.com/izory/ZrAdminNetCore/tags","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/izhaorui/Zr.Admin.NET/blob/v3.8.1/ZR.Admin.WebApi/Controllers/System/SysUserController.cs#L47-L52","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/izhaorui/Zr.Admin.NET/blob/v3.8.1/ZR.Repository/BaseRepository.cs#L342-L351","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/izhaorui/Zr.Admin.NET/commit/d32c211aeedab3e07bb4f02f54bb251fff37361c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/zradmin-net-order-by-sort-sql-injection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/zr-admin-net-through-3.8.2-sql-injection-via-pagerinfo-sort-order-by","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111670","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111670 — ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports hand…","description":"ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id parameter in ReportSourceDatabases, ReportSourceTables,…","indicators":{"cves":["CVE-2026-111670"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:49.470Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/clickvisual/clickvisual/blob/v1.1.2/api/internal/api/apiv2/report/report.go#L282-L343","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/clickvisual/clickvisual/blob/v1.1.2/api/internal/service/report/metadata.go#L136-L152","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/clickvisual-report-module-missing-authz-cross-instance-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/clickvisual-through-1.1.2-missing-authorization-in-apiv2-report-module","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/clickvisual-report-module-missing-authz-cross-instance-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111672","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111672 — Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pi…","description":"Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipeline ids via the web, log, monitoring, pod, and copy_pipeline en…","indicators":{"cves":["CVE-2026-111672"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:49.790Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/data-infra/cube-studio/blob/v2026.09.01/myapp/views/view_pipeline.py#L1144-L1268","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/cube-studio-idor-expose-api-lifecycle","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cube-studio-through-2026.09.01-idor-via-pipeline-view-and-copy-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/cube-studio-idor-expose-api-lifecycle","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111674","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111674 — Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated u…","description":"Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public image URLs and album listings, to overwrite display names with…","indicators":{"cves":["CVE-2026-111674"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:50.063Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/Hello-hao/Tbed/blob/20240319/src/main/java/cn/hellohao/controller/AdminController.java#L158-L176","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Hello-hao/Tbed/blob/20240319/src/main/resources/mapper/ImgMapper.xml#L171-L189","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/tbed-setimgfilename-cross-user-image-metadata-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/tbed-through-20240319-missing-authorization-via-setimgfilename-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111676","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111676 — Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticate…","description":"Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attackers can enumerate sequential ticketid values on GET /ticket/tooltip to read ticket conversations, including customer per…","indicators":{"cves":["CVE-2026-111676"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:50.337Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/faveosuite/faveo-helpdesk/blob/v2.0.3/app/Http/Controllers/Agent/helpdesk/TicketController.php#L2356-L2374","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/faveosuite/faveo-helpdesk/blob/v2.0.3/routes/web.php#L350","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/faveo-helpdesk-ticket-tooltip-cross-department-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/faveo-helpdesk-through-2.0.3-broken-access-control-via-ticket-tooltip-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111677","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111677 — Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c ca…","description":"Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supply a crafted Word 8 .doc file claiming up to 0xffff LSTF records in a tiny buffer, causing reads past the heap allocatio…","indicators":{"cves":["CVE-2026-111677"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:50.477Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/rsdoiel/antiword/blob/fe4b579067122a2d9d62647efb1ee7cfe3ca92bb/prop8.c#L799-L825","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/antiword-word8-plcflst-count-and-fkp-run-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/antiword-through-0.37-heap-out-of-bounds-read-via-vget8lstinfo-in-prop8-c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/antiword-word8-plcflst-count-and-fkp-run-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111679","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111679 — Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authentica…","description":"Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/auth/locked-ips. Attackers can send DELETE requests without an ip parameter to invoke unlockAll(), disabling the login ra…","indicators":{"cves":["CVE-2026-111679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:50.770Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/EKKOLearnAI/ekko-studio/blob/v0.7.36/packages/server/src/modules/studio/controllers/auth.ts#L807-L822","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EKKOLearnAI/ekko-studio/blob/v0.7.36/packages/server/src/modules/studio/routes/auth.ts#L26-L27","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EKKOLearnAI/ekko-studio/commit/e65030bf26d12e1a523e773c5738af9ff61377ef","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/EKKOLearnAI/ekko-studio/issues/3057","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ekko-studio-through-0.7.36-missing-authorization-via-api-auth-locked-ips","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111682","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111682 — EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated lo…","description":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API. Attackers with any ROLE_USER account can query /api/model-config/page or /api/model-config/{id} to retrieve unma…","indicators":{"cves":["CVE-2026-111682"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:51.213Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/smartloli/EFAK","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/smartloli/EFAK/blob/v5.1.0/efak-web/src/main/java/org/kafka/eagle/web/controller/ModelConfigController.java#L34-L56","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/smartloli/EFAK/blob/v5.1.0/efak-web/src/main/java/org/kafka/eagle/web/security/config/WebSecurityConfig.java#L89-L93","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/efak-missing-admin-gate-user-management-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/efak-5.0.0-through-5.1.0-missing-authorization-via-api-model-config-exposes-api-keys","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/efak-missing-admin-gate-user-management-api","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111683","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111683 — Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenti…","description":"Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/<id> and /api/serv…","indicators":{"cves":["CVE-2026-111683"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:51.350Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/allegro/ralph","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/allegro/ralph/blob/20260902.1/src/ralph/dc_view/views/api.py#L17-L96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/allegro/ralph/blob/20260902.1/src/ralph/lib/permissions/api.py#L194-L209","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/ralph-dc-view-rack-api-missing-authorization","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/allegro-ralph-through-20260902.1-missing-authorization-in-data-center-rack-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111688","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111688 — Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated…","description":"Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role data-scope restrictions by sending openDataFilter=false. Attackers can append this parameter to the department getByParentId or search endpoints to retrieve the entire organization…","indicators":{"cves":["CVE-2026-111688","CVE-2026-111689"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:52.063Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/Exrick/xboot/blob/3.3.4/xboot-fast/src/main/java/cn/exrick/xboot/modules/base/serviceimpl/DepartmentServiceImpl.java#L35-L60","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/xboot-data-scope-filter-bypass-cross-dept-user-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/exrick-xboot-through-3.3.4-data-scope-bypass-via-opendatafilter-parameter","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Exrick/xboot/blob/3.3.4/xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/manage/UserController.java#L223-L233","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Exrick/xboot/blob/3.3.4/xboot-fast/src/main/java/cn/exrick/xboot/modules/base/serviceimpl/UserServiceImpl.java#L178-L181","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/xboot-through-3.3.4-authorization-bypass-via-getbydepartmentid-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111694","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111694 — qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remo…","description":"qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can POST sequential userId values to /flyflow/userById or call roleAll and deptListByParentDeptId…","indicators":{"cves":["CVE-2026-111694"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:52.907Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/qiantongtech/qKnow","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-framework/qknow-security/src/main/java/tech/qiantong/qknow/security/config/SecurityConfig.java#L133","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/qiantongtech/qKnow/blob/v2.4.3/qknow-module-system/qknow-module-system-biz/src/main/java/tech/qiantong/qknow/module/system/controller/admin/flyflow/FlyFlowController.java#L77-L99","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/qknow-flyflow-unauth-user-directory-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/qknow-through-2.4.3-missing-authentication-via-flyflow-workflow-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111696","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111696 — data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPas…","description":"data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasource detail API, for example via cross-work…","indicators":{"cves":["CVE-2026-111696"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:53.220Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/shaiwz/data-platform-open/blob/efeacd35e8450b7a084fa2134d292cd058cf605b/data-platform-open-common/src/main/resources/application-common.yml#L104-L106","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shaiwz/data-platform-open/blob/efeacd35e8450b7a084fa2134d292cd058cf605b/data-platform-open-web/src/main/java/cn/dataplatform/open/web/service/impl/AesPasswordEncAndDecServiceImpl.java#L21-L25","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/data-platform-open-datasource-cross-workspace-idor-and-hardcoded-aes-key","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/data-platform-open-through-commit-efeacd3-hardcoded-aes-key-for-datasource-passwords","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111697","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111697 — HUIZHI ChargeOS cloud through 3.0.9 contains an insecure direct object reference vulnerability in th…","description":"HUIZHI ChargeOS cloud through 3.0.9 contains an insecure direct object reference vulnerability in the hcp-mp MeController and OrderController that trusts client-supplied userId, openId and orderNumber parameters. Attackers can enumerate sequential member ids against endpoints like /me/getMemberBalan…","indicators":{"cves":["CVE-2026-111697"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:53.350Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/roinli/HUIZHI-ChargeOS-cloud/blob/1a2cbab79bb7abe7df3b4f9977f5d0e18e65bd4a/hcp-modules/hcp-mp/src/main/java/com/hcp/mp/controller/MeController.java#L40-L91","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/roinli/HUIZHI-ChargeOS-cloud/blob/1a2cbab79bb7abe7df3b4f9977f5d0e18e65bd4a/hcp-modules/hcp-mp/src/main/java/com/hcp/mp/controller/OrderController.java#L59-L87","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/huizhi-chargeos-mp-member-api-userid-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/huizhi-chargeos-cloud-through-3.0.9-idor-via-hcp-mp-member-and-order-apis","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/huizhi-chargeos-mp-member-api-userid-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111698","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111698 — HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp Pay…","description":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or reduce…","indicators":{"cves":["CVE-2026-111698"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:53.490Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/roinli/HUIZHI-ChargeOS-cloud/blob/1a2cbab79bb7abe7df3b4f9977f5d0e18e65bd4a/hcp-modules/hcp-mp/src/main/java/com/hcp/mp/controller/PayController.java#L18-L28","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/huizhi-chargeos-mp-member-api-userid-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/huizhi-chargeos-cloud-through-3.0.9-unpaid-wallet-credit-via-pay-xcxrecharge","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/huizhi-chargeos-mp-member-api-userid-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111699","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111699 — Niefy wx-api through 0.8.2 contains an authentication bypass vulnerability that allows unauthenticat…","description":"Niefy wx-api through 0.8.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to impersonate WeChat fans by supplying a raw openid cookie to fan-facing controllers. Attackers knowing a victim's openid can call /wxUser/getUserInfo and /wxUserTags endpoints to read n…","indicators":{"cves":["CVE-2026-111699"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:53.633Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/niefy/wx-api/blob/0.8.2/src/main/java/com/github/niefy/config/ShiroConfig.java#L43-L49","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/niefy/wx-api/blob/0.8.2/src/main/java/com/github/niefy/modules/wx/controller/WxUserController.java#L31-L37","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/niefy/wx-api/blob/0.8.2/src/main/java/com/github/niefy/modules/wx/controller/WxUserTagsController.java#L31-L45","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/wx-api-cross-tenant-idor-and-unauth-fan-pii","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/niefy-wx-api-through-0.8.2-authentication-bypass-via-unverified-openid-cookie","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111703","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111703 — yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authe…","description":"yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authenticated sales users to access other users' customer records by supplying arbitrary ids. Attackers can enumerate ids against the get, update, delete and do-open endpoints to read contact details, over…","indicators":{"cves":["CVE-2026-111703"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:54.213Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/guchengwuyue/yshop-crm/blob/a93846584877ed5f6ffcaeeb7182d1707a21a221/yshop-crm/yshop-module-crm/yshop-module-crm-biz/src/main/java/co/yixiang/yshop/module/crm/controller/admin/crmcustomer/CrmCustomerController.java#L46-L87","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/guchengwuyue/yshop-crm/blob/a93846584877ed5f6ffcaeeb7182d1707a21a221/yshop-crm/yshop-module-crm/yshop-module-crm-biz/src/main/java/co/yixiang/yshop/module/crm/service/crmcustomer/CrmCustomerServiceImpl.java#L105-L203","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/yshop-crm-customer-idor-and-missing-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/yshop-crm-through-2.1.3-idor-via-crm-customer-by-id-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/yshop-crm-customer-idor-and-missing-authz","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111705","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111705 — Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows…","description":"Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated members to read other members' booking records by supplying arbitrary bookId values to /clientApi/book/myBookDetail. Attackers can iterate the auto-increment bookId to retrieve contact n…","indicators":{"cves":["CVE-2026-111705"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:54.527Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/fushengqian/fuint/blob/57ec01895e22dd93f16f493db30a77a7c1b148f2/fuint-application/src/main/java/com/fuint/common/service/impl/BookItemServiceImpl.java#L237-L258","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/fushengqian/fuint/blob/57ec01895e22dd93f16f493db30a77a7c1b148f2/fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientBookController.java#L252-L265","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/fuint-booking-detail-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fuint-through-commit-57ec018-idor-via-bookid-in-mybookdetail","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/fuint-booking-detail-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111707","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111707 — 99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenti…","description":"99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks an owner check. Attackers can send a fingerprint header to obtain a visitor JWT and iterate sequential chatId values to…","indicators":{"cves":["CVE-2026-111707"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:54.803Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/vastxie/99AI","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vastxie/99AI/blob/v4.3.0/service/src/common/auth/jwtAuth.guard.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vastxie/99AI/blob/v4.3.0/service/src/modules/chatLog/chatLog.service.ts#L463-L475","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/99ai-chatlog-unauth-export-and-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/99ai-through-4.3.0-idor-via-api-chatlog-querysinglechat-chat-message-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/99ai-chatlog-unauth-export-and-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111709","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111709 — WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerabilit…","description":"WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET /tickets/:tick…","indicators":{"cves":["CVE-2026-111709"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.070Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/canove/whaticket-community","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/controllers/MessageController.ts#L24-L58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/canove/whaticket-community/blob/cf047955a6f0d07002ed89c67d765c28d06f8d52/backend/src/services/TicketServices/ShowTicketService.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/whaticket-community-signup-eop-ticket-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/whaticket-community-through-commit-cf04795-idor-via-tickets-ticketid-and-messages-ticketid","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111712","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111712 — Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unaut…","description":"Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the URI with a public route. Attackers can request paths prefixed with l7_web_auth.cgi or an .ico route to invoke protected…","indicators":{"cves":["CVE-2026-111712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.453Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2ad7fa2aff1/2026.10.15-netcore-nr256cn-cgi-auth-bypass-alternate-path.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-authentication-bypass-via-cgi-path-prefix","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111713","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111713 — tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr res…","description":"tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr resolves 'data-' prefixed attributes while the https-only guard validates the unprefixed attribute. Attackers who can place markup, such as CMS authors, can add data-url with a javascript: URL beside a b…","indicators":{"cves":["CVE-2026-111713"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.580Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/AmauriC/tarteaucitron.js/blob/v1.36.0/tarteaucitron.js#L2641-L2648","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AmauriC/tarteaucitron.js/commit/068653bd47f5d4a493251ca8e15bd2b0be9b544f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AmauriC/tarteaucitron.js/compare/v1.36.0...v1.37.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AmauriC/tarteaucitron.js/releases/tag/v1.37.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/tarteaucitron-js-before-1.37.0-xss-via-getelemattr-attribute-validation-mismatch","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111715","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111715 — Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets…","description":"Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated employees read other departments' wiki metadata by supplying a foreign slug. Attackers with only wiki:read:own_dept permission can query get_neighborhood() without scope checks to obtain…","indicators":{"cves":["CVE-2026-111715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.857Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/nduckmink/arkon/blob/v0.9.2/app/routers/wiki.py#L621-L633","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nduckmink/arkon/blob/v0.9.2/app/services/wiki_service.py#L200-L257","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/arkon-wiki-graph-cross-department-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/arkon-through-0.9.2-missing-authorization-via-wiki-graph-neighborhood-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/arkon-wiki-graph-cross-department-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111716","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111716 — Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employe…","description":"Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip can_access_document. Attackers can call the plan, progress, PATCH, retry and approve-extraction rou…","indicators":{"cves":["CVE-2026-111716"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.997Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/nduckmink/arkon/blob/v0.9.2/app/routers/sources.py#L257-L275","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nduckmink/arkon/blob/v0.9.2/app/routers/sources.py#L295-L312","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nduckmink/arkon/blob/v0.9.2/app/routers/sources.py#L644-L673","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/arkon-wiki-graph-cross-department-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/arkon-through-0.9.2-broken-access-control-via-sources-by-id-routes","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111717","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111717 — Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allow…","description":"Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can_access_skill check. Attackers holding the default skill:read permission can request GET /api/skills/{sl…","indicators":{"cves":["CVE-2026-111717"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:56.130Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/nduckmink/arkon/blob/v0.9.2/app/routers/skills.py#L408-L425","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/nduckmink/arkon/blob/v0.9.2/app/routers/skills.py#L427-L434","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/arkon-wiki-graph-cross-department-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/arkon-through-0.9.2-missing-authorization-via-skills-versions-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/arkon-wiki-graph-cross-department-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111718","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111718 — AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inj…","description":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and row-lev…","indicators":{"cves":["CVE-2026-111718"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:56.257Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/kuafuai/aipexbase/blob/690adb933e72b1ead911badd52caa6d1f71046cd/backend/src/main/java/com/kuafuai/dynamic/condition/GroupByBuilder.java#L22-L33","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/kuafuai/aipexbase/blob/690adb933e72b1ead911badd52caa6d1f71046cd/backend/src/main/java/com/kuafuai/dynamic/condition/OrderByBuilder.java#L24-L67","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/aipexbase-dynamic-data-order-by-group-by-sql-injection","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aipexbase-through-commit-690adb9-sql-injection-via-api-data-invoke","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/aipexbase-dynamic-data-order-by-group-by-sql-injection","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111719","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111719 — Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController…","description":"Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by supplying a trxNo parameter. Attackers can guess transaction numbers, a '7' prefix plus a snowflake ID, to obtain the f…","indicators":{"cves":["CVE-2026-111719"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:56.397Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/roncoo/roncoo-pay/blob/9428382af21cd5568319eae7429b7e1d0332ff40/roncoo-pay-web-gateway/src/main/java/com/roncoo/pay/controller/F2FPayController.java#L75-L79","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/roncoo-pay-f2f-order-query-unauth-record-disclosure","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/roncoo-pay-through-commit-9428382-information-disclosure-via-f2fpay-order-query","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111720","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111720 — fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery v…","description":"fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or cloud m…","indicators":{"cves":["CVE-2026-111720"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:56.533Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/config/CorsConfig.java#L33","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/controller/chat/WebParserController.java#L13-L25","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/service/impl/chat/WebParserServiceImpl.java#L28-L45","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/fish-island-web-parse-unauth-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fish-island-backend-through-commit-7c61b78-ssrf-via-api-web-parse","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/fish-island-web-parse-unauth-ssrf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111721","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111721 — Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated user…","description":"Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces auth_warehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on freezeContainerStoc…","indicators":{"cves":["CVE-2026-111721"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:56.683Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/jingsewu/open-wes/blob/v1.0.0/server/modules-gateway/gateway-core/src/main/java/org/openwes/gateway/filter/GlobalGatewayFilter.java#L86-L128","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jingsewu/open-wes/blob/v1.0.0/server/modules-wes/wes-stock/src/main/java/org/openwes/wes/stock/controller/ContainerStockController.java#L24-L34","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/open-wes-gateway-missing-warehouse-scope-authz","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/open-wes-through-1.0.0-broken-access-control-via-globalgatewayfilter-warehouse-scoping","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-80092","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-80092 — Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attac…","description":"Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":["CVE-2026-80092"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:18:37.640Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80092","label":"secure@microsoft.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-89098","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89098 — A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local dom…","description":"A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an asserti…","indicators":{"cves":["CVE-2026-89098"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:19:42.320Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-89098","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2469511","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2469511","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107674","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107674 — IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DC…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.","indicators":{"cves":["CVE-2026-107674"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:02.473Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292225","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111793","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111793 — Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to re…","description":"Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience.","indicators":{"cves":["CVE-2026-111793"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:05.680Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/GISOpenwave/security-advisories-public/blob/main/CAN-2026-2032674.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://openwave.ai","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17068","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17068 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.","indicators":{"cves":["CVE-2026-17068"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:06.063Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292423","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17073","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17073 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to mis…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.","indicators":{"cves":["CVE-2026-17073"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:06.190Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292423","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17488","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17488 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrict…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.","indicators":{"cves":["CVE-2026-17488"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:06.443Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292270","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17491","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-17491 — IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restr…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.","indicators":{"cves":["CVE-2026-17491"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:06.557Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292273","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85231","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85231 — A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by s…","description":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lea…","indicators":{"cves":["CVE-2026-85231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:44.180Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-85231","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478512","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85977","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85977 — A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially…","description":"A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation…","indicators":{"cves":["CVE-2026-85977"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:44.430Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:80360","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-85977","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478979","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478979","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108373","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-108373 — ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0,…","description":"ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, certain endpoints in the Sales Person-wise Transaction Summary report fail to enforce proper authorization checks. When a role-limited authenticated user requests the affected financial report, the qu…","indicators":{"cves":["CVE-2026-108373"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T21:17:19.437Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/frappe/erpnext/commit/202f52271ca2f689c2836fc27ca30c9cd507958e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/commit/24f0989ac1f6d3054643d6377e8c126ee8ca0cf7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/releases/tag/v15.118.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/releases/tag/v16.27.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/erpnext/security/advisories/GHSA-rgrq-243c-c4g6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55796","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-55796 — Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.60.3 and 16.7.1,…","description":"Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL string interpolation. An authenticated HR user supplies crafted Salary Payments via ECS report filter values. The affec…","indicators":{"cves":["CVE-2026-55796"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T21:19:18.963Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/frappe/hrms/commit/d823d20c49493c2959e809d41c862c037c8109e6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/commit/e9eef45425072b4e3cefea71683d515d63906d66","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/releases/tag/v15.60.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/releases/tag/v16.7.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/security/advisories/GHSA-c32r-q985-64xr","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-64862","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-64862 — Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.58.3 and 16.4.3,…","description":"Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reques…","indicators":{"cves":["CVE-2026-64862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T21:19:19.597Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/frappe/hrms/commit/6214ec8db13c587e05150bdf3e4e9e5d28b7fd94","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/commit/eefb8f4552d0e1e09ee4abae4fdc76fc5473e00a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/releases/tag/v15.58.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/releases/tag/v16.4.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/hrms/security/advisories/GHSA-wfc6-cw72-cvhx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-96542","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96542 — Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (vers…","description":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\\SYSTEM by modifying the EAAntiCheatService serv…","indicators":{"cves":["CVE-2026-96542"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T21:21:02.040Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://catsandmalware.com/blog/eight-bytes-to-system/","label":"secure@ea.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-62438","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-62438 — A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose se…","description":"A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when calculating image dimensions during file dec…","indicators":{"cves":["CVE-2026-62438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:17:24.307Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-62438","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554456","label":"secalert@redhat.com","domainType":"other"},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/16313","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96628","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-96628 — Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.…","description":"Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.managerAuth accepts X-Arcane-Agent-Token credentials and the environment-token branch calls next before the AdminRequired option is evaluated. An attacker with a valid X-Arcane-Agent…","indicators":{"cves":["CVE-2026-96628"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:18:58.367Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/getarcaneapp/arcane/commit/4fe4c7ed9483dff7d43e3c4bee6a92037ce886b4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/pull/3881","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/releases/tag/backend/v2.11.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getarcaneapp/arcane/security/advisories/GHSA-mp22-58ff-6fhr","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111802","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111802 — A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus…","description":"A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume…","indicators":{"cves":["CVE-2026-111802"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:01.277Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-111802","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554410","label":"secalert@redhat.com","domainType":"other"},{"url":"https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/2179","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89085","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89085 — A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially craft…","description":"A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resu…","indicators":{"cves":["CVE-2026-89085"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:02.553Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-89085","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466034","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466034","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89088","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89088 — A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing…","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized r…","indicators":{"cves":["CVE-2026-89088"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:02.680Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-89088","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462951","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462951","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89096","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89096 — A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (D…","description":"A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory gro…","indicators":{"cves":["CVE-2026-89096"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:02.810Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-89096","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462372","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107763","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107763 — The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions…","description":"The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level…","indicators":{"cves":["CVE-2026-107763"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T03:16:28.213Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/fastcache-by-host-it/tags/1.7.4/src/Admin.php#L304","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fastcache-by-host-it/tags/1.7.4/src/Admin.php#L44","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/fastcache-by-host-it/tags/1.7.4/src/Core/Platform/Utility.php#L372","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3737013%40fastcache-by-host-it&new=3737013%40fastcache-by-host-it","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f0b4db0-2ccd-47e8-8f40-82e97726f815?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111601","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111601 — The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scr…","description":"The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inj…","indicators":{"cves":["CVE-2026-111601"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T03:16:28.613Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/hippoo/tags/1.12.0/app/rest.php#L189","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hippoo/tags/1.12.0/app/rest.php#L422","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/hippoo/tags/1.12.0/app/rest.php#L424","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3739429/hippoo/trunk/app/rest.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3c9c41af-0211-4a53-9ef4-b9392b2e9463?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107752","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107752 — The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces…","description":"The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fields searchSql / searchSkuSql)' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…","indicators":{"cves":["CVE-2026-107752"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:48.260Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L256","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L473","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L613","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L622","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/usc-e-shop/tags/2.12.4/classes/orderList.class.php#L776","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743211/usc-e-shop","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3743211/usc-e-shop/trunk/classes/orderList.class.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0e78b5db-3f38-4ed7-9bec-6dd55d44f04f?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109368","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109368 — The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information…","description":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract private per-event…","indicators":{"cves":["CVE-2026-109368"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:51.480Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/class-calendar-editor-outputter.php#L432","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/class-calendar-editor-outputter.php#L484","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/functions-actions-ajax-calendar.php#L12","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-booking-system/tags/2.1.0.2/includes/base/admin/calendar/functions-actions-ajax-calendar.php#L62","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3750120/wp-booking-system/trunk/includes/base/admin/calendar/functions-actions-ajax-calendar.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?old=3730163&old_path=%2Fwp-booking-system%2Ftrunk&new=&new_path=%2Fwp-booking-system%2Ftrunk","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/164a276a-612f-416f-b9ef-1c2e6dd0e8e4?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109985","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109985 — The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnera…","description":"The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authen…","indicators":{"cves":["CVE-2026-109985"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:51.760Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/class-lazy-loader.php#L742","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/class-lazy-loader.php#L879","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/class-lazy-loader.php#L882","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/xspeed/tags/1.4.2/includes/modules/Lazy/LazyModule.php#L197","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3749755%40xspeed&new=3749755%40xspeed","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0d2f534b-804e-4def-bcc6-7418ad7d1ffd?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109989","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109989 — The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_w…","description":"The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_width_unit' parameter in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level acces…","indicators":{"cves":["CVE-2026-109989"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:51.907Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/themify-popup/tags/1.4.7/includes/themify-metabox/includes/themify-metabox-core.php#L151","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/themify-popup/tags/1.4.7/includes/themify-metabox/includes/themify-metabox-core.php#L209","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/themify-popup/tags/1.4.7/views/styles.php#L29","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3749602%40themify-popup&new=3749602%40themify-popup","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/da003985-7fb2-4f5b-bb70-6ec3578ef3e8?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110268","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110268 — The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all v…","description":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files outside…","indicators":{"cves":["CVE-2026-110268"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:52.057Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.svn.wordpress.org/post-export-import-with-media/trunk/","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L251","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L258","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L357","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.1/includes/class-admin-download-buttons.php#L360","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L251","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L258","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L357","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/post-export-import-with-media/tags/1.17.2/includes/class-admin-download-buttons.php#L360","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3749775/post-export-import-with-media/trunk/includes/class-admin-download-buttons.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/061b1f95-26da-4d1a-9e0a-6f83adf56d2e?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111726","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111726 — The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible'…","description":"The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible' Shortcode Attribute in all versions up to, and including, 7.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level a…","indicators":{"cves":["CVE-2026-111726"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:16:52.233Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/themify-builder/tags/7.8.2/modules/module-slider.php#L113","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/themify-builder/tags/7.8.2/templates/template-slider.php#L90","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3749606%40themify-builder&new=3749606%40themify-builder","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c1d5bc13-585d-405d-b6f3-14db26464e55?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92715","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92715 — The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure…","description":"The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with…","indicators":{"cves":["CVE-2026-92715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T04:17:10.073Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L1009","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L1053","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L303","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/tutor/tags/4.0.8/classes/Course.php#L850","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3730615/tutor/trunk/classes/Course.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/12f093bd-5230-4103-b571-80543c1b43cf?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103376","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103376 — The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authori…","description":"The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress plugin before 1.120.70 does not perform any capability or ownership check before returning an order's secret key in response to an unauthenticated request, allowing anyone to re…","indicators":{"cves":["CVE-2026-103376"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:30.930Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/be66093b-2042-45a6-90cf-c45f105776c6/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104122","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104122 — The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using…","description":"The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to perform SQL injection attacks.","indicators":{"cves":["CVE-2026-104122"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:33.237Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/01abcbf8-d256-49b9-b660-38c50506c441/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104246","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104246 — The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature fiel…","description":"The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing unauthenticated users to attach arbitrary files (bounded to wp-content on current Contact Form 7) to a form's outgoing email via path…","indicators":{"cves":["CVE-2026-104246"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:33.347Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/e56dc60b-9232-43f2-8d57-fe9452c85281/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106470","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106470 — The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one…","description":"The WP Data Access  WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome.","indicators":{"cves":["CVE-2026-106470"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:33.450Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/ace39ccf-9fe4-4616-9155-818c10d685dc/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110527","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110527 — The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creat…","description":"The WP User Manager  WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment.","indicators":{"cves":["CVE-2026-110527"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:33.580Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/a9368969-cc1c-48b7-aa39-94a4d3c50669/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-81343","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-81343 — The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability…","description":"The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into the site's global ACF options store, allowing unauthenticated visitors to overwrite site-wide option values via a publi…","indicators":{"cves":["CVE-2026-81343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:33.710Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/1919eb80-195e-48ed-b58e-3cab4bb1d73d/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-81344","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-81344 — The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP cl…","description":"The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rendered on public-facing pages, allowing high-privilege users such as administrators to inject a PHP object which, given a s…","indicators":{"cves":["CVE-2026-81344"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:33.830Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/4e6d6ade-d58c-40c1-9235-678dac0c0fa9/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91074","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-91074 — The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter…","description":"The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator passwo…","indicators":{"cves":["CVE-2026-91074"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:33.933Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/e33c7673-2e31-4f0f-9e29-c65a6b4944a5/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92432","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92432 — The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination be…","description":"The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing.","indicators":{"cves":["CVE-2026-92432"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:34.357Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/8f9a085f-dc4d-46c2-a738-3c2ab562b90c/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-92433","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-92433 — The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Pat…","description":"The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration.","indicators":{"cves":["CVE-2026-92433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:34.457Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/ea970f2e-0fe8-4fef-99ff-a74255fa5a04/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97314","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97314 — The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object…","description":"The ThirstyAffiliates  WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated attackers to disclose the destination URLs of unpublished affiliate links and to record fabricated click statistics.","indicators":{"cves":["CVE-2026-97314"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:34.553Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/37e0a31e-39cc-4035-ae27-b34e7ec8f0d0/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109983","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109983 — The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the '…","description":"The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'post_title' parameter in all versions up to, and including, 3.12.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level ac…","indicators":{"cves":["CVE-2026-109983"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T08:16:28.020Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/ymc-smart-filter/tags/3.12.19/ymc2/assets/js/frontend/ymc-public.min.js#L10","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ymc-smart-filter/tags/3.12.19/ymc2/src/api/abstracts/FG_REST_Abstract_Controller.php#L66","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ymc-smart-filter/tags/3.12.19/ymc2/src/api/controllers/frontend/FG_REST_Frontend_Search_Controller.php#L135","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ymc-smart-filter/tags/3.12.19/ymc2/src/api/controllers/frontend/FG_REST_Frontend_Search_Controller.php#L148","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/ymc-smart-filter/tags/3.12.20/ymc2/src/api/controllers/frontend/FG_REST_Frontend_Search_Controller.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://wordpress.org/plugins/ymc-smart-filter","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/27cfa62d-ba16-4344-be0c-82cac4d21d1c?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110253","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110253 — The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable…","description":"The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the weforms_delete_entry_attachments function in all versions up to, and including, 1.6.28 This makes it possible for unauth…","indicators":{"cves":["CVE-2026-110253"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T08:16:28.167Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/BoldGrid/weforms/tree/1.6.29","label":"security@wordfence.com","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/weforms/tags/1.6.28/includes/class-ajax.php#L1056","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/weforms/tags/1.6.28/includes/class-ajax.php#L627","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/weforms/tags/1.6.28/includes/class-ajax.php#L711","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/weforms/tags/1.6.28/includes/fields/class-field-image.php#L138","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/weforms/tags/1.6.28/includes/functions.php#L362","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cb7478fa-418d-43ce-8db7-b7ede06574df?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-71435","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-71435 — Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated use…","description":"Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued. Users can keep their APIKey cookie active through regular use, extending it every 24 hours to access Coder indefinitely aft…","indicators":{"cves":["CVE-2025-71435"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:28.683Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-3rw9-wmc8-8948","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-before-2.23.0-session-expiration-bypass-via-oidc-without-refresh-token","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110882","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110882 — Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notificati…","description":"Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through 4.0.1.","indicators":{"cves":["CVE-2026-110882"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:28.830Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-plugin-4-0-1-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111885","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111885 — phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupC…","description":"phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup() that omits privilege-level checks on target groups. Authenticated non-SuperAdmin administrators holding GROUP_DELETE can send a crafted groupId to /admin/api/group/delete to p…","indicators":{"cves":["CVE-2026-111885"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:29.610Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-crh2-cv2j-cpjh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-missing-authorization-via-deletegroup-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-crh2-cv2j-cpjh","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111886","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111886 — phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the removeTwofactorConfig…","description":"phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the removeTwofactorConfig() 2FA removal endpoint, allowing authenticated attackers to guess TOTP codes without limit. Attackers holding a hijacked session and CSRF token can repeatedly POST guesses to /api/user/remove-twofact…","indicators":{"cves":["CVE-2026-111886"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:29.770Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7pjw-6v4g-f837","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha.2-before-4.2.0-beta-2fa-brute-force-via-remove-twofactor-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-7pjw-6v4g-f837","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111887","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111887 — phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerabilit…","description":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and emails via a distinct HTTP 409 response. Attackers can submit guest comments to the comment create endpoint with candida…","indicators":{"cves":["CVE-2026-111887"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:29.930Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pgxw-7c68-83w7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-account-enumeration-via-guest-comment-endpoint","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pgxw-7c68-83w7","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111889","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111889 — phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization…","description":"phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the admin dashboard that allows authenticated users without admin rights to view restricted data. Attackers with any activated account can request /admin/index.php/ to read unpublishe…","indicators":{"cves":["CVE-2026-111889"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:30.237Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-4378-pcwq-fc29","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.1.0-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-missing-authorization-via-admin-dashboard","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-4378-pcwq-fc29","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111890","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111890 — phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserC…","description":"phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUserRights that drops per-right language restrictions when rights are re-granted. Administrators holding USER_EDIT can submit language-scoped rights to the update-rights API, includin…","indicators":{"cves":["CVE-2026-111890"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:30.393Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-3666-fmjj-qm5h","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha.2-before-4.2.0-beta-privilege-escalation-via-updateuserrights","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-3666-fmjj-qm5h","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111891","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111891 — phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the g…","description":"phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermissions and updateMembers endpoints check held rights without regard to language or category scope and write unrestricted group grants. Non-superadmin administrato…","indicators":{"cves":["CVE-2026-111891"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:30.550Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6vf7-mrj2-7c37","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-from-4.2.0-alpha.2-before-4.2.0-beta-privilege-escalation-via-group-permissions-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111892","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111892 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/pas…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and user/password/reset endpoints. Unauthenticated attackers can send unlimited reset requests to flood a registered user's inbox with reset emails, exhausting mailer and server resources…","indicators":{"cves":["CVE-2026-111892"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:30.703Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-p2cj-r7vv-fr2r","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-missing-rate-limiting-on-password-reset-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-p2cj-r7vv-fr2r","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111893","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111893 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupControl…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions() that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions with…","indicators":{"cves":["CVE-2026-111893"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:30.860Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-gv7w-78f6-mcmh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-privilege-escalation-via-group-category-restrictions-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-gv7w-78f6-mcmh","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111894","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111894 — phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting…","description":"phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability that allows authenticated content authors to inject JavaScript by embedding iframes with data:text/html sources in FAQ or News content. Attackers can bypass the hostless media-host allo…","indicators":{"cves":["CVE-2026-111894"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:31.017Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-fg92-v5rr-4xjq","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-3.2.1-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-stored-xss-via-iframe-data-uri","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111895","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111895 — phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Mic…","description":"phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferred_username claim and whose AuthEntraId::create() ignores the duplicate-login exception while continuing with the existing local acc…","indicators":{"cves":["CVE-2026-111895"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:31.177Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6hhv-gc4g-f4r7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-3.2.0-before-4.0.0-and-4.0.2-before-4.2.0-beta-account-takeover-via-entra-id-preferred-username","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6hhv-gc4g-f4r7","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111896","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111896 — phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in…","description":"phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows FAQ editors to store executable SVG files. Attackers can split script tags around removed tokens like processing instructions so single-pass removal reassembles them, executin…","indicators":{"cves":["CVE-2026-111896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:31.337Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-95fm-rwq4-rxrf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-stored-xss-via-svg-upload-sanitizer-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111900","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111900 — phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerabi…","description":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.php that fails to verify whether an attachment's parent FAQ is published or visible to the requester. Authenticated users with the dlattachment permission can request index.php?acti…","indicators":{"cves":["CVE-2026-111900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:31.800Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-h76j-35m7-3mwq","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-draft-faq-attachment-disclosure-via-attachment-php","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111902","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111902 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccess…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that treats a missing FAQ translation as visible to unauthenticated users. Attackers can send a mismatched Accept-Language header to the comments and attachments API endpoints to read co…","indicators":{"cves":["CVE-2026-111902"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:32.103Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-g6fj-8cjr-wrxv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-authorization-bypass-via-comments-and-attachments-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111903","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111903 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSa…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users with FAQ_EDIT permission to bypass sanitization using XML DTD custom entities. Attackers can upload an SVG defining an entity that expands to javascript in an anchor href, ex…","indicators":{"cves":["CVE-2026-111903"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:32.253Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-j3v5-p957-w6gq","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-stored-xss-via-svg-dtd-entity-bypass","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-j3v5-p957-w6gq","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111904","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111904 — phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows…","description":"phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated attackers to read hidden open questions due to an inverted api.onlyPublicQuestions check in OpenQuestionController. Attackers can send GET requests to the /api/v4.0/open-questions endp…","indicators":{"cves":["CVE-2026-111904"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:32.407Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6xm9-p734-8fx6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.2.0-alpha-before-4.2.0-beta-information-disclosure-via-open-questions-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6xm9-p734-8fx6","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111905","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111905 — phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object ref…","description":"phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability in GET /admin/api/user/data/{userId}, which returns any user's full faquserdata row, including the live TOTP secret, without a SuperAdmin or protected-target check. Delegated admi…","indicators":{"cves":["CVE-2026-111905"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:32.563Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-hp8j-w94m-j5c7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-3.2.0-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-idor-leaks-totp-secret-via-admin-api-user-data","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111906","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111906 — phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulner…","description":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATION_EDIT…","indicators":{"cves":["CVE-2026-111906"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:32.723Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-cmvh-fpmf-8gfx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-csrf-in-elasticsearch-opensearch-admin-api-index-operations","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-cmvh-fpmf-8gfx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111910","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111910 — phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerabili…","description":"phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php that allows attackers to download attachments of restricted FAQs by bypassing per-record permission checks. Low-privileged users with the dlattachment right, or anonymous users wh…","indicators":{"cves":["CVE-2026-111910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:33.343Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-pp67-9fv9-ph7q","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-before-4.1.9-and-4.2.0-alpha-before-4.2.0-beta-authorization-bypass-via-attachment-php-downloads","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111912","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111912 — Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in Forum…","description":"Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated members to modify other users' forum topics. Attackers can replace the topic_uuid parameter in their own topic_save request, reusing their CSRF token, to…","indicators":{"cves":["CVE-2026-111912"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:33.687Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/Admidio/admidio/security/advisories/GHSA-8256-4wm7-f628","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/admidio-5.0.0-before-5.0.16-idor-via-forum-topic-update","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111913","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111913 — Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenti…","description":"Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. The groups_roles_export check in modules/groups-roles/lists_show.php omits pdfl, which later runs the pdf export, letti…","indicators":{"cves":["CVE-2026-111913"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:33.823Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/Admidio/admidio/security/advisories/GHSA-86f5-rg96-frrj","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/admidio-5.0.0-before-5.0.16-authorization-bypass-via-pdfl-mode-in-lists-show-php","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Admidio/admidio/security/advisories/GHSA-86f5-rg96-frrj","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111914","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111914 — Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventor…","description":"Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated users to bypass the inventory_module_enabled restriction. Attackers with any valid login can request the DataTables JSON feed to read every inventory ite…","indicators":{"cves":["CVE-2026-111914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:33.963Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/Admidio/admidio/security/advisories/GHSA-5f29-r7rj-43mf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Admidio/admidio/security/advisories/GHSA-qfjf-c48f-x87g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/admidio-5.0.11-before-5.0.16-broken-access-control-via-inventory-data-php","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Admidio/admidio/security/advisories/GHSA-5f29-r7rj-43mf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111916","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111916 — Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated a…","description":"Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the category_view role-visibility filter. Attackers can request the weblinks RSS feed for an organization to retrieve link names,…","indicators":{"cves":["CVE-2026-111916"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:34.127Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/Admidio/admidio/security/advisories/GHSA-552r-jc93-7qr3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/admidio-before-5.0.16-information-disclosure-via-rss-links-php-weblinks-feed","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111917","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111917 — Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attacke…","description":"Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep WebSocket access after revocation because handleAuth never checks the JWT sid claim against the sessions table. Attackers holding a stolen access token can open or maintain connections to /…","indicators":{"cves":["CVE-2026-111917"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:34.263Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-4hv6-xc92-j86g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vikunja-2.3.0-before-2.7.0-websocket-authentication-ignores-session-revocation","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-4hv6-xc92-j86g","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111918","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111918 — Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateT…","description":"Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that allows authenticated users with zero accessible projects to write task_positions rows for all tasks instance-wide. Attackers can delete their Inbox after repointing default_project_i…","indicators":{"cves":["CVE-2026-111918"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:34.403Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-fprf-r6rv-xg99","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vikunja-1.0.0-rc0-before-2.7.0-cross-tenant-task-position-writes-via-saved-filter-creation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111919","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111919 — Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed…","description":"Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed collaborators to keep receiving project data through webhooks they created. Former collaborators keep receiving task titles and descriptions through their webhook, including content created after the…","indicators":{"cves":["CVE-2026-111919"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:34.543Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hjx8-qv73-f7cm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vikunja-0.22.0-before-2.7.0-improper-access-revocation-via-webhooks","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hjx8-qv73-f7cm","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111920","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111920 — Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_a…","description":"Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which resolves a user's effective project permission as the maximum over the project tree, silently overriding explicit lower-permission shares on sub-projects. A collaborator with write ac…","indicators":{"cves":["CVE-2026-111920"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:34.680Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-pjr3-86v4-5p7w","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vikunja-2.6.0-broken-access-control-via-inherited-project-permissions","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-pjr3-86v4-5p7w","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111921","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111921 — Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project me…","description":"Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write permission to delete admin-tier link shares because the delete permission check reads an unloaded share object. Attackers can send DELETE requests to the v1 or v2 projects shares endp…","indicators":{"cves":["CVE-2026-111921"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:34.820Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-fmmf-xq98-g327","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vikunja-0.13.0-before-2.7.0-incorrect-authorization-in-link-share-deletion","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111922","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111922 — Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost…","description":"Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set. Attackers controlling a page on any localhost port can send a credentialed request to the token refresh endpoint and read the…","indicators":{"cves":["CVE-2026-111922"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:34.957Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m687-p538-r5hp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vikunja-2.2.0-before-2.7.0-permissive-cors-policy-trusting-localhost-origins","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m687-p538-r5hp","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111928","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111928 — Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow ru…","description":"Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/policy.rego, which does not verify organization membership for per-user ACL entries, and organization member removal does not scrub those entries. Authenticated users removed from an…","indicators":{"cves":["CVE-2026-111928"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:35.673Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-7v78-w67v-pm2g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-2.0.0-before-2.34.8-authorization-bypass-via-user-level-acl-in-rbac-policy","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111929","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111929 — Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner da…","description":"Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a known…","indicators":{"cves":["CVE-2026-111929"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:35.807Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-hrhj-hpwc-9hmc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-2.30.0-before-2.34.8-cross-organization-file-disclosure-via-downloadfile-rpc","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111930","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111930 — Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspac…","description":"Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint, which checks only workspace read access and then fetches group members using an elevated system context. Authenticated users granted workspace use access can query the endpoint t…","indicators":{"cves":["CVE-2026-111930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:35.940Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-cvrm-2xxr-hpcv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-from-2.26.0-before-2.34.8-information-disclosure-via-workspace-acl-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111931","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111931 — Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that…","description":"Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which become s…","indicators":{"cves":["CVE-2026-111931"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:36.080Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-98qx-9p2x-c4wh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-2.0.0-before-2.34.8-open-redirect-via-workspace-app-proxy","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111865","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111865 — A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b.…","description":"A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutral…","indicators":{"cves":["CVE-2026-111865"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T21:16:25.793Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/THU-MIG/yoloe/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/THU-MIG/yoloe/issues/148","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111865","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004883","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421573","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421573/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111868","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111868 — A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function d…","description":"A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/PulsarObjectMessage.java. This manipulation causes deserialization. It is possible to initiate the attack remotely. The…","indicators":{"cves":["CVE-2026-111868"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T01:16:34.483Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/datastax/pulsar-jms/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/datastax/pulsar-jms/issues/210","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111868","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004922","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421580","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421580/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111869","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111869 — A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of th…","description":"A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit is p…","indicators":{"cves":["CVE-2026-111869"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T03:16:28.970Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/makeplane/plane/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/issues/9913","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111869","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004923","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005105","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421581","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421581/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111870","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111870 — A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b1465…","description":"A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the file admin/admin.php. Performing a manipulation results in missing authentication. The attack can be initiated remotely.…","indicators":{"cves":["CVE-2026-111870"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T04:16:31.750Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/itsmeravitejak/Online-Examination-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/itsmeravitejak/Online-Examination-System/issues/4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111870","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005047","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421582","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421582/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111875","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111875 — A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerabilit…","description":"A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php of the component Scheduled Restore. Such manipulation of the argument schema_name leads to missing au…","indicators":{"cves":["CVE-2026-111875"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T06:16:56.840Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/David-Crty/databasement/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/David-Crty/databasement/releases/tag/v1.8.2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/David-Crty/databasement/security/advisories/GHSA-3rjj-69wh-r95f","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111875","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005220","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421587","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421587/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111876","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111876 — A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the f…","description":"A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the argument raw results in command injection. The attack requires a local approach. The reported GitHub is…","indicators":{"cves":["CVE-2026-111876"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T06:16:57.047Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/alexpasmantier/television/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/alexpasmantier/television/issues/1124","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/alexpasmantier/television/pull/1125","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111876","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005368","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421588","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421588/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/alexpasmantier/television/issues/1124","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109937","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109937 — The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL bel…","description":"The Otter Blocks  WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before using it to build the return destination of a Stripe Checkout session, allowing unauthenticated attackers to redirect victims who complete or cancel checkout to an arbitrary e…","indicators":{"cves":["CVE-2026-109937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:50.927Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/9765313d-c879-457f-851f-dab74b8d90a0/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110026","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110026 — The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities whe…","description":"The Tasty Recipes Lite  WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor to add, rename and permanently delete terms in any taxonomy on the site, including categories, tags…","indicators":{"cves":["CVE-2026-110026"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:51.967Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/fc8fc746-9ee1-4364-881f-28ff598f007c/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110032","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110032 — The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its s…","description":"The Salon Booking System  WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon Staff or Salon Worker role to reset any other user's role, including administrators, to a customer and…","indicators":{"cves":["CVE-2026-110032"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.183Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/07310082-5ccc-4703-9344-2bd6e823b245/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110033","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110033 — The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image UR…","description":"The Salon Booking System  WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under an attacker-chosen filename, allowing users with the Salon Staff role or higher to force the server t…","indicators":{"cves":["CVE-2026-110033"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.287Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/6c8f3d74-7aa6-4b4e-96d0-ee89fc47a255/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110035","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110035 — The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endp…","description":"The Salon Booking System  WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staff, allowing any authenticated user, such as a subscriber, to retrieve every discount coupon configured on the site, including coupons the administrator has chosen to hide from cust…","indicators":{"cves":["CVE-2026-110035"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.397Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/146eaa60-08e8-43b2-8d87-74e79261d422/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110069","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110069 — The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, o…","description":"The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment amounts…","indicators":{"cves":["CVE-2026-110069"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.500Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/5d5a24fe-1fb9-48ae-bd5c-de95b04c5f21/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110070","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110070 — The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is author…","description":"The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber role to modify the title, content, and excerpt of arbitrary posts, pages, and custom post types create…","indicators":{"cves":["CVE-2026-110070"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.610Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/4c7ff021-da5b-44ff-ac99-142b5bdc0790/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110976","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110976 — The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media…","description":"The AI Engine  WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type, includin…","indicators":{"cves":["CVE-2026-110976"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.713Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/c42eabbf-f357-46cd-b008-1b18eba83bf7/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111041","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111041 — The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI medi…","description":"The AI Engine  WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including co…","indicators":{"cves":["CVE-2026-111041"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:52.920Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/829fef5b-915c-4762-a90d-47a08d78266b/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111877","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111877 — A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db…","description":"A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipulation of the argument Search can lead to cross site scripting. The attack may be performed from remote. The exploit has b…","indicators":{"cves":["CVE-2026-111877"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:53.033Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-111877","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005404","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421589","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421589/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111942","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111942 — A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an un…","description":"A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and c…","indicators":{"cves":["CVE-2026-111942"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:53.343Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/hrisikeshpal/Blood_Bank_Management_System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/hrisikeshpal/Blood_Bank_Management_System/issues/1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111942","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005422","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421592","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421592/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-87844","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-87844 — The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform an…","description":"The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to, allo…","indicators":{"cves":["CVE-2026-87844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T07:16:53.560Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/648c7a32-1fc8-44a9-8f52-3aab81a2de55/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110365","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110365 — Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows…","description":"Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14.","indicators":{"cves":["CVE-2026-110365"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:36.443Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/file-manager-advanced/vulnerability/wordpress-advanced-file-manager-plugin-5-4-14-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110880","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110880 — Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting In…","description":"Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit): from n/a through 3.4.6.","indicators":{"cves":["CVE-2026-110880"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:37.070Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/convertkit/vulnerability/wordpress-kit-formerly-convertkit-plugin-3-4-6-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110883","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110883 — Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Rand…","description":"Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5.","indicators":{"cves":["CVE-2026-110883"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T11:16:37.200Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/webcam-2way-videochat/vulnerability/wordpress-2way-videocalls-and-random-chat-plugin-6-1-5-broken-authentication-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111984","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111984 — A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects th…","description":"A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of the component Card Builder. The manipulation of the argument filename leads to cross site scripting. It is possible to initiate…","indicators":{"cves":["CVE-2026-111984"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:11.210Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17497","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32810554/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111984","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005460","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421650","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421650/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111985","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111985 — A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the fun…","description":"A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. It…","indicators":{"cves":["CVE-2026-111985"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:11.440Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17498","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32811560/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111985","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005484","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421651","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421651/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112002","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112002 — ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordContr…","description":"ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of Social-provisioned accounts set local passwords without the current password. Attackers holding a stolen session cookie can send PUT /settings/password to create…","indicators":{"cves":["CVE-2026-112002"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:12.323Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/projectsend/projectsend/blob/v2.6.0/app/Http/Controllers/Settings/PasswordController.php#L54-L90","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/commit/717852ff6a99391dbd816a2bb0bb3f40cad70f72","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/releases/tag/v2.7.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/security/advisories/GHSA-4r8h-mwfm-f5f4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/projectsend-2.5.0-before-2.7.0-unverified-password-change-via-settings-password","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112003","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112003 — ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that…","description":"ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans. Attackers can submit ./ path aliases to the orphans import or delete endpoints, deleting or adopting other owners' files…","indicators":{"cves":["CVE-2026-112003"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:12.490Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/projectsend/projectsend/blob/v2.6.0/app/Modules/Files/OrphanFileScanner.php#L109-L120","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/commit/1e34773ad39c256f1320f4d2b47b93a5805f07c6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/releases/tag/v2.7.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/projectsend/projectsend/security/advisories/GHSA-pv88-7863-5hwq","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/projectsend-2.0.0-before-2.7.0-path-validation-bypass-via-orphan-file-import-delete","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/projectsend/projectsend/security/advisories/GHSA-pv88-7863-5hwq","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112006","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112006 — OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certif…","description":"OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTEL_EXPORTER_OTLP_CERTIFICATE variables are empty strings. Man-in-the-middle attackers can impersonate the collector to read or alte…","indicators":{"cves":["CVE-2026-112006"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:12.927Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/open-telemetry/opentelemetry-python/blob/v1.44.0/exporter/opentelemetry-exporter-otlp-proto-http/src/opentelemetry/exporter/otlp/proto/http/trace_exporter/__init__.py#L170-L185","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/open-telemetry/opentelemetry-python/blob/v1.44.0/exporter/opentelemetry-exporter-otlp-proto-http/src/opentelemetry/exporter/otlp/proto/http/trace_exporter/__init__.py#L93-L96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/open-telemetry/opentelemetry-python/commit/89cc68b9ea7e15969b4f042d63397bdc74a3d60e","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/open-telemetry/opentelemetry-python/releases/tag/v1.45.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/opentelemetry-opentelemetry-exporter-otlp-proto-http-1.5.0-before-1.45.0-improper-certificate-validation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112007","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112007 — Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt_ult_load_so…","description":"Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt_ult_load_song() in fmt/ult.c that fails to clamp the one-byte sample count to MAX_SAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csf_destroy() to free…","indicators":{"cves":["CVE-2026-112007"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:13.097Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/schismtracker/schismtracker","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/schismtracker/schismtracker/blob/74215ae300b555928332e03152dfcdc898f96ca6/fmt/ult.c#L319-L330","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/schismtracker-ult-sample-count-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/schism-tracker-through-20260524-heap-out-of-bounds-write-via-ult-loader","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112008","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112008 — libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that all…","description":"libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a m…","indicators":{"cves":["CVE-2026-112008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:13.247Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://hackmd.io/@haindpwn/libmng-ordr-chunk-store-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/projects/libmng/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/projects/libmng/files/libmng-devel/2.0.3/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libmng-through-2.0.3-heap-buffer-overflow-via-ordr-chunk-reader-mng-read-ordr","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112009","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112009 — smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() tha…","description":"smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashes…","indicators":{"cves":["CVE-2026-112009"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:13.383Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/icculus/smpeg","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/icculus/smpeg/blob/d188dc111f4817288718705e4a84e248803ccfdc/MPEGsystem.cpp#L803-L823","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/smpeg-system-header-stream-table-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/smpeg-through-2.0.0-heap-out-of-bounds-read-via-mpegsystem-fillbuffer","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112010","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112010 — smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp…","description":"smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a reach…","indicators":{"cves":["CVE-2026-112010"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:13.520Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/icculus/smpeg","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/icculus/smpeg/blob/d188dc111f4817288718705e4a84e248803ccfdc/MPEGsystem.cpp#L295-L350","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/icculus/smpeg/blob/d188dc111f4817288718705e4a84e248803ccfdc/MPEGsystem.cpp#L777","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/smpeg-system-header-stream-table-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/smpeg-through-2.0.0-integer-underflow-via-stream-header-in-mpegsystem-cpp","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112011","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112011 — libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that al…","description":"libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of 1 and large samples value, wrapping the se…","indicators":{"cves":["CVE-2026-112011"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:13.653Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/gchudov/libtta","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gchudov/libtta/blob/af8dc48ce859e98842ab1a3eec98416d22a5199e/libtta.c#L473-L485","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gchudov/libtta/blob/af8dc48ce859e98842ab1a3eec98416d22a5199e/libtta.c#L602-L616","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/libtta-seek-table-count-overflow-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/projects/tta/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtta-through-2.3-integer-overflow-via-tta-decoder-init-get-info-seek-table","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112012","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112012 — libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_proces…","description":"libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache[-1]…","indicators":{"cves":["CVE-2026-112012"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:13.873Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/gchudov/libtta","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gchudov/libtta/blob/af8dc48ce859e98842ab1a3eec98416d22a5199e/libtta.c#L618","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gchudov/libtta/blob/af8dc48ce859e98842ab1a3eec98416d22a5199e/libtta.c#L715-L730","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/libtta-seek-table-count-overflow-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/projects/tta/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtta-through-2.3-stack-out-of-bounds-write-via-zero-channel-count","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112013","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112013 — libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allow…","description":"libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including the…","indicators":{"cves":["CVE-2026-112013"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:14.030Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/gchudov/libtta","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gchudov/libtta/blob/af8dc48ce859e98842ab1a3eec98416d22a5199e/libtta.c#L602-L605","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/libtta-seek-table-count-overflow-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/projects/tta/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtta-through-2.3-divide-by-zero-via-tta-decoder-init-get-info","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112014","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112014 — LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to dec…","description":"LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Attackers who obtain a providers export file can derive the AES-GCM key via PBKDF2 using the embedded salt and recover ever…","indicators":{"cves":["CVE-2026-112014"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:14.167Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/netease-youdao/LobsterAI/blob/2026.9.23/src/renderer/components/Settings.tsx#L4324-L4331","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/netease-youdao/LobsterAI/blob/2026.9.23/src/renderer/constants/app.ts#L4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/netease-youdao/LobsterAI/commit/1eb28c40d7e42d6cbade07874e6f6c068b6a9a64","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/netease-youdao/LobsterAI/issues/2851","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/netease-youdao/LobsterAI/releases/tag/2026.10.16","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/lobsterai-before-2026.10.16-hardcoded-password-in-provider-api-key-export","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112016","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112016 — Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-d…","description":"Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and restore staging files. Attackers can POST to a non-existent .cgi pathname to write attacker-controlled content into /tmp…","indicators":{"cves":["CVE-2026-112016"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:14.450Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/lukadqq/netcore-router-public-refs/blob/a44d562736b41c944223297e9144d2ad7fa2aff1/2026.10.15-netcore-nr256cn-fixed-tmp-sink-write.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/netcore-nr256cn-through-1.5.140116-unauthenticated-write-to-fixed-boa-staging-files","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112017","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112017 — JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers t…","description":"JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters into dictionary and online report SQL fragments. Attackers can send newline-separated payloads to endpoints like /sys/di…","indicators":{"cves":["CVE-2026-112017"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:14.600Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/jeecgboot/JeecgBoot","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jeecgboot/JeecgBoot/blob/v3.9.2/jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.java#L269-L305","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jeecgboot/JeecgBoot/commit/a2be896f753936956ee6863b632b8e5a0231345c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jeecgboot/JeecgBoot/issues/9677","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jeecgboot/JeecgBoot/releases/tag/v3.9.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/jeecgboot-before-3.9.5-sql-injection-via-sqlinjectionutil-newline-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112019","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112019 — cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats(…","description":"cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. Attackers can supply a crafted glTF or GLB file that passes cgltf_validate() to read adjacent heap memory into vertex data o…","indicators":{"cves":["CVE-2026-112019"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:14.910Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/jkuhlmann/cgltf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jkuhlmann/cgltf/blob/360db1a95480fe102ae9c69b27c5d101167ff5ba/cgltf.h#L1612-L1619","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/jkuhlmann/cgltf/blob/360db1a95480fe102ae9c69b27c5d101167ff5ba/cgltf.h#L2436-L2441","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/cgltf-accessor-unpack-floats-sparse-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cgltf-through-1.15-heap-out-of-bounds-read-via-cgltf-accessor-unpack-floats","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112020","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112020 — LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypes…","description":"LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent h…","indicators":{"cves":["CVE-2026-112020"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:15.067Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/lvandeve/lodepng","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lvandeve/lodepng/blob/e584a8490db1b76b81bf298c11c09d3b55d9c270/lodepng_util.cpp#L185-L203","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/lodepng-getfiltertypesinterlaced-short-idat-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/lodepng-through-20261006-heap-out-of-bounds-read-via-getfiltertypesinterlaced","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111986","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111986 — A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the…","description":"A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely.…","indicators":{"cves":["CVE-2026-111986"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:35.920Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17499","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32834193/a1111-yaml-target-poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111986","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1006657","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421652","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421652/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112046","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112046 — OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-b…","description":"OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept() and de…","indicators":{"cves":["CVE-2026-112046"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:36.463Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_11/asm/src/main/java/org/objectweb/asm/Label.java#L417","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/4bb1a4701e7b61c2163525b987a96a8db815cb68","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/480","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-9.11-before-9.11.1-denial-of-service-via-infinite-loop-in-label-resolve","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112047","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112047 — OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authen…","description":"OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project members to act on clusters outside their scope by exploiting project-wide permission checks. Attackers can call the AI access test, agent reset, kubectl plan approval and incident AI c…","indicators":{"cves":["CVE-2026-112047"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:36.607Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/OneUptime/oneuptime/blob/14.0.68/packages/Common/Server/API/KubernetesClusterAiAccessAPI.ts#L188-L207","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OneUptime/oneuptime/commit/264e1ba13149cbd4c80cb22f2177b405886b0452","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OneUptime/oneuptime/releases/tag/14.0.69","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/OneUptime/oneuptime/security/advisories/GHSA-8fph-9j9f-xxgc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/oneuptime-14.0.2-before-14.0.69-incorrect-authorization-in-kubernetes-ai-actions","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112048","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112048 — libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing at…","description":"libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or ST_GeomFromWKB input to crash the process or cor…","indicators":{"cves":["CVE-2026-112048"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:36.770Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://hackmd.io/@haindpwn/libspatialite-wkb-geometry-count-overflow","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.gaia-gis.it/fossil/libspatialite/file?name=src/gaiageo/gg_wkb.c&ci=5a5528e8d2","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libspatialite-through-5.1.0-uncontrolled-memory-allocation-via-parsewkbpolygon-ring-count","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112049","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112049 — Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_conte…","description":"Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install directory via crafted .vpk archives. Attackers can embed '..' segments or absolute paths in zip entry names to write attacker-controlled f…","indicators":{"cves":["CVE-2026-112049"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:36.913Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/Vita3K/Vita3K/blob/f0273e4cd9b860ea77c44c73d9f5c5b1ed5fa8ab/vita3k/interface.cpp#L219-L234","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Vita3K/Vita3K/commit/55f88cd17a78ce8af7d753c7c4eb2f709f7d6dbc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Vita3K/Vita3K/issues/4254","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/vita3k-before-build-4187-path-traversal-via-vpk-package-installation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112051","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112051 — Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthentica…","description":"Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name. Attackers can register a persisted custom model through POST /v1/model_registrations/{model_type} with na…","indicators":{"cves":["CVE-2026-112051"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:37.190Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/xorbitsai/inference/blob/v4.0.1/xinference/model/cache_manager.py#L117-L134","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xorbitsai/inference/blob/v4.0.1/xinference/model/utils.py#L1175-L1182","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xorbitsai/inference/commit/beddc97ac211f8414597fe8479493be0603f7c84","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xorbitsai/inference/issues/5702","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/xinference-through-4.0.1-path-traversal-via-model-name-in-custom-model-registration","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112052","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112052 — libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex c…","description":"libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite databa…","indicators":{"cves":["CVE-2026-112052"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:37.337Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://hackmd.io/@haindpwn/libspatialite-wkb-geometry-count-overflow","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.gaia-gis.it/fossil/libspatialite/file?name=src/gaiageo/gg_wkb.c&ci=5a5528e8d2","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libspatialite-through-5.1.0-integer-overflow-in-wkb-geometry-parsing","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/cve-2026-112048-112052-libspatialite-wkb-geometry-count-overflow","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112053","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112053 — Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows…","description":"Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. Attackers can deliver a crafted low-delay Dirac stream with a wavelet filter i…","indicators":{"cves":["CVE-2026-112053"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:37.470Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/Distrotech/schroedinger/blob/schroedinger-1.0.11/schroedinger/schroparams.c#L463","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/schroedinger-lowdelay-quant-matrix-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/schroedinger-libschroedinger-through-1.0.11-out-of-bounds-read-via-schro-params-set-default-quant-matrix","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/schroedinger-lowdelay-quant-matrix-oob","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112054","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112054 — Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows atta…","description":"Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schro_decoder_parse_transform_parameters…","indicators":{"cves":["CVE-2026-112054"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:37.620Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/Distrotech/schroedinger/blob/schroedinger-1.0.11/schroedinger/schrodecoder.c#L2932","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/schroedinger-lowdelay-quant-matrix-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/schroedinger-libschroedinger-through-1.0.11-divide-by-zero-in-low-delay-transform-parsing","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112055","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112055 — wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and…","description":"wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like Abi…","indicators":{"cves":["CVE-2026-112055"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:37.757Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/AbiWord/wv/blob/wv-1-2-9/fkp.c#L122","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/wv-fkp-crun-stsh-cstd-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wvware-wv-through-1.2.9-stack-out-of-bounds-read-via-wvgetpapx-fkp-and-wvgetchpx-fkp","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/wv-fkp-crun-stsh-cstd-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112056","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112056 — wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in style…","description":"wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. Attackers can provide a .doc file with ten or fewer styles or out-of-range style base indexes to read past he…","indicators":{"cves":["CVE-2026-112056"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:37.890Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/AbiWord/wv/blob/wv-1-2-9/stylesheet.c#L447","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/wv-fkp-crun-stsh-cstd-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/wvware-wv-through-1.2.9-heap-out-of-bounds-read-via-wvgetstsh","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112057","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112057 — libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_cha…","description":"libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vts_ttn than…","indicators":{"cves":["CVE-2026-112057"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:38.037Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://code.videolan.org/videolan/libdvdnav/-/blob/6.1.1/src/searching.c#L670","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://code.videolan.org/videolan/libdvdnav/-/commit/1d2af48d685911a169fe77d500b1d426910c6f77","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libdvdnav-navigation-index-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libdvdnav-before-7.0.0-out-of-bounds-read-in-dvdnav-describe-title-chapters","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/cve-2026-112057-112058-libdvdnav-navigation-index-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112058","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112058 — VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows…","description":"VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with title…","indicators":{"cves":["CVE-2026-112058"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:38.167Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://code.videolan.org/videolan/libdvdnav/-/blob/7.0.0/src/vm/getset.c#L51","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libdvdnav-navigation-index-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libdvdnav-through-7.0.0-out-of-bounds-read-via-set-ptt-jumptt","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libdvdnav-navigation-index-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112059","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112059 — libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader ca…","description":"libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. Attackers can craft a .las file with a LASSchema variable length record whose schema exceeds 65535 bytes, so tools like…","indicators":{"cves":["CVE-2026-112059"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:38.300Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/libLAS/libLAS/blob/1.8.1/src/detail/reader/reader.cpp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/libLAS/libLAS/blob/1.8.1/src/header.cpp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/liblas-record-length-truncation-heap-overflow","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/liblas-through-1.8.1-heap-out-of-bounds-write-via-lasschema-vlr","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112060","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112060 — librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerab…","description":"librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corru…","indicators":{"cves":["CVE-2026-112060"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:38.437Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.ffmpeg.org/gitweb/rtmpdump.git/blob/138fdb258d9fc26f1843fd1b891180416c9dc575:/librtmp/amf.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/librtmp-amf3-decode-and-strict-array-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://rtmpdump.mplayerhq.hu/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/librtmp-rtmpdump-through-2.6-heap-out-of-bounds-write-via-amf3-decode","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112061","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112061 — librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode th…","description":"librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer th…","indicators":{"cves":["CVE-2026-112061"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:38.600Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.ffmpeg.org/gitweb/rtmpdump.git/blob/138fdb258d9fc26f1843fd1b891180416c9dc575:/librtmp/amf.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/librtmp-amf3-decode-and-strict-array-oob","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://rtmpdump.mplayerhq.hu/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/librtmp-rtmpdump-through-2.6-heap-out-of-bounds-read-via-amfprop-decode","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112062","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112062 — lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that a…","description":"lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers…","indicators":{"cves":["CVE-2026-112062"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:38.750Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/lwip-tcpip/lwip/blob/STABLE-2_2_1_RELEASE/src/apps/mdns/mdns.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/lwip-tcpip/lwip/commit/ab2f69c7d8980c01cdd67ed4b23ac61118ed0205","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/lwip-mdns-search-result-domain-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/lwip-through-2.2.1-stack-out-of-bounds-write-via-mdns-search-response-handler","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/cve-2026-112062-lwip-mdns-search-result-domain-oob-write","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112063","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112063 — libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allo…","description":"libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborting…","indicators":{"cves":["CVE-2026-112063"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:38.893Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/strophe/libstrophe/blob/0.14.0/src/sasl.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/strophe/libstrophe/blob/0.14.0/src/scram.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/libstrophe-scram-salt-stack-overflow","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libstrophe-through-0.14.0-stack-based-buffer-overflow-via-scram-salt-in-scram-hi","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libstrophe-scram-salt-stack-overflow","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111987","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111987 — A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by thi…","description":"A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card Builder. Such manipulation of the argument __metadata__.sshs_model_…","indicators":{"cves":["CVE-2026-111987"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T14:16:54.630Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17500","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32834382/a1111-sshs-hash-poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111987","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1006710","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421653","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421653/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110024","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110024 — @fastify/jwt is a JWT utility plugin for Fastify. In versions prior to 10.2.5, the top-level sign an…","description":"@fastify/jwt is a JWT utility plugin for Fastify. In versions prior to 10.2.5, the top-level sign and verify methods replace the globally configured defaults with the per-call options instead of merging them, so passing any per-call option silently drops every global default that the call does not r…","indicators":{"cves":["CVE-2026-110024"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:51.417Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/fastify/fastify-jwt/security/advisories/GHSA-f5gh-84pj-v2pg","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111988","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111988 — A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unk…","description":"A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAuth Callback Handler. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.17.0-beta.1 ca…","indicators":{"cves":["CVE-2026-111988"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:52.483Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/dyad-sh/dyad/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/dyad-sh/dyad/commit/39fbae87b38573616a1a3b152cdb292787bb1109","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/dyad-sh/dyad/pull/4433","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/dyad-sh/dyad/releases/tag/v1.17.0-beta.1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/dyad-sh/dyad/security/advisories/GHSA-pqj5-w36j-2839","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111988","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1007180","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421654","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421654/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111991","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111991 — A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the…","description":"A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of…","indicators":{"cves":["CVE-2026-111991"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:52.853Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/WongKinYiu/yolov9/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/WongKinYiu/yolov9/issues/670","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111991","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1007973","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421656","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421656/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104627","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-104627 — The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assert…","description":"The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without checking that the signed-in user had started the linking. Because OpenID 2.0 allows unsolicited assertions, an attacker-controlled OpenID provider could attach the attacker's identity to t…","indicators":{"cves":["CVE-2026-104627"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:32.463Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39642","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39744","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-mf69-7pqq-86vx","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105661","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105661 — Requesting `/{username}/-/repositories` for an individual user instead of an organization made the o…","description":"Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home handler dereference a nil organization and panic. The request needs no authentication and no special configuration. The server answered with an HTTP 500 error and logged a panic for e…","indicators":{"cves":["CVE-2026-105661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:32.590Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39839","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39847","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-c3cr-qq9g-666c","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105964","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-105964 — The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a siz…","description":"The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who can run a workflow and obtains the runner token of that run could send an oversized request to the artifact service and exhaust the memory of the server, which terminates the Gitea…","indicators":{"cves":["CVE-2026-105964"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:32.700Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39818","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39822","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-6f9g-7jgm-m5ph","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107686","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107686 — The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locke…","description":"The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users without write access, although the API did. A signed-in user who could read an issue could therefore add or remove reactions on a locked issue and its comments, bypassing the intera…","indicators":{"cves":["CVE-2026-107686"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:32.903Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39839","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39847","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-wx44-9m3m-rjqx","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109844","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109844 — `GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching witho…","description":"`GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that the user still had access to it. A user who watched a private repository while having access, and later lost it, for example through a team permission downgrade, could still read its…","indicators":{"cves":["CVE-2026-109844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:33.090Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38321","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38390","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-96gv-2xc4-4hxj","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110311","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110311 — Creating a draft release through the API returned an `assets` list that was built from a release wit…","description":"Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata (file name, UUID, upload time, size…","indicators":{"cves":["CVE-2026-110311"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:33.197Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39743","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39752","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-8j56-f865-gqq2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110324","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110324 — The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username…","description":"The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and unfollow) required only a signed-in user. Any authenticated user could therefore obtain the full name, location, website and description of a user with a private profile from the respon…","indicators":{"cves":["CVE-2026-110324"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:33.297Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39501","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39507","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-xmfc-hqq8-33wh","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110494","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110494 — Adding attachments to a release checked the repository and release of an attachment but not whether…","description":"Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A user with write access to the releases of a repository, who knew the UUID of an attachment in that repository, could link it to a release. This exposed…","indicators":{"cves":["CVE-2026-110494"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:33.403Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39839","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39847","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-cwq7-782w-pxcc","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97859","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-97859 — Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, s…","description":"Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were registered without the `individualPermsChecker` middleware that enforces the visibility of the target user. An authenticated user could therefore read th…","indicators":{"cves":["CVE-2026-97859"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:33.637Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39004","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39039","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-xvfh-qwmh-f92w","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112027","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112027 — A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601ef…","description":"A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function file_exists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the argume…","indicators":{"cves":["CVE-2026-112027"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T23:16:56.073Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/light0011/cms/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/light0011/cms/issues/15","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112027","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008072","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421675","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421675/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112028","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112028 — A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618…","description":"A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the component Vote Handler. This manipulation of the argument X-R…","indicators":{"cves":["CVE-2026-112028"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T23:16:56.247Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/light0011/cms/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/light0011/cms/issues/16","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112028","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008073","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421676","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421676/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112030","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112030 — A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code…","description":"A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public and…","indicators":{"cves":["CVE-2026-112030"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T00:16:30.640Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/453","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112030","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008078","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421678","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421678/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112032","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112032 — A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util:…","description":"A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The project was info…","indicators":{"cves":["CVE-2026-112032"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T00:16:31.790Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/aircheng-org/iWebShop-5/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/aircheng-org/iWebShop-5/issues/8","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112032","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008387","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421680","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421680/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112033","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112033 — A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is t…","description":"A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function admin_repwd/admin_repwd_act of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery.…","indicators":{"cves":["CVE-2026-112033"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T01:16:36.473Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/aircheng-org/iWebShop-5/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/aircheng-org/iWebShop-5/issues/9","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112033","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008388","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421681","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421681/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112034","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112034 — A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the fu…","description":"A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file plugins/_userInfo/_userInfo.php of the component Login Redirect. This manipulation of the argument callback causes open redirect. The attack can be initiated r…","indicators":{"cves":["CVE-2026-112034"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T01:16:37.340Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/aircheng-org/iWebShop-5/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/aircheng-org/iWebShop-5/issues/10","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112034","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008389","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421682","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421682/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112035","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112035 — A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the f…","description":"A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file controllers/simple.php. Such manipulation of the argument user_id leads to weak password recovery. The attack can be launched remotely. The exploit has been dis…","indicators":{"cves":["CVE-2026-112035"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T01:16:37.510Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/aircheng-org/iWebShop-5/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/aircheng-org/iWebShop-5/issues/11","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112035","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008390","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421683","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421683/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/aircheng-org/iWebShop-5/issues/11","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112036","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112036 — A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list…","description":"A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used…","indicators":{"cves":["CVE-2026-112036"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T01:16:37.677Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"http://www.ghostscript.com/cgi-bin/findgit.cgi?3984925b660afb8a781ddf504021e91be1bc671e","label":"cna@vuldb.com","domainType":"other"},{"url":"https://artifex.com/","label":"cna@vuldb.com","domainType":"other"},{"url":"https://bugs.ghostscript.com/attachment.cgi?id=28609","label":"cna@vuldb.com","domainType":"other"},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=709768","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-112036","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008495","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421684","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421684/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112040","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112040 — A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.…","description":"A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the component Sign-In. This manipulation of the argument Referer causes ope…","indicators":{"cves":["CVE-2026-112040"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T02:17:06.667Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/457","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112040","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008083","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421688","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421688/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112043","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112043 — A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function c…","description":"A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedure of the file packages/trpc/server/routers/viewer/webhook/util.ts of the component Webhook Handler. Executing a manipulation of the argument ID can lead to authorization bypass. It…","indicators":{"cves":["CVE-2026-112043"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T03:16:58.920Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/calcom/cal.diy/issues/29982","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/calcom/cal.diy/pull/30223","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112043","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009017","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421691","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421691/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/calcom/cal.diy/issues/29982","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112045","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112045 — A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDelet…","description":"A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo results in improper authorization. The attack can be launched…","indicators":{"cves":["CVE-2026-112045"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T04:17:08.373Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/donetick/donetick/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/donetick/donetick/issues/711","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/donetick/donetick/security/advisories/GHSA-c545-2whr-g2v6","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112045","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009027","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421693","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421693/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112073","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112073 — A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affec…","description":"A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. Th…","indicators":{"cves":["CVE-2026-112073"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T04:17:08.707Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Tencent/ncnn/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Tencent/ncnn/issues/7034","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112073","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009476","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421752","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421752/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112074","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112074 — A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6.…","description":"A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched remote…","indicators":{"cves":["CVE-2026-112074"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T04:17:08.910Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Tencent/ncnn/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Tencent/ncnn/issues/7035","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112074","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009498","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421753","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421753/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112075","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112075 — A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function Fa…","description":"A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransformer._is_transformer_module_ref of the file unsloth/models/sentence_transformer.py. This manipulation of the argument Type causes use of externally-controlled input to select classes…","indicators":{"cves":["CVE-2026-112075"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T04:17:09.287Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/unslothai/unsloth/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/unslothai/unsloth/commit/de801746386a53a0cb26216e715a0af863b76ad9","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/unslothai/unsloth/issues/12419","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/unslothai/unsloth/pull/11560","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/unslothai/unsloth/releases/tag/v0.1.902-beta","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32908312/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112075","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009576","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421754","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421754/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112076","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112076 — A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. This vulnerability a…","description":"A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. This vulnerability affects the function DownloadQueue.__write_feed_metadata_sync of the file app/ytdl.py of the component Feed-metadata Thumbnail Fetch Handler. Such manipulation leads to server-side request forgery. The…","indicators":{"cves":["CVE-2026-112076"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T04:17:09.543Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/alexta69/metube/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/alexta69/metube/commit/a3896604540223ecbb8258b41b1d745d62647d16","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/alexta69/metube/releases/tag/2026.09.29","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/alexta69/metube/security/advisories/GHSA-hq22-f7w6-p8cr","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112076","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009577","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421755","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421755/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112077","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112077 — A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This issue affects the function r_cor…","description":"A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This issue affects the function r_core_cmd_str_pipe in the library libr/core/rtr_http.inc.c of the component HTTP Sandbox Policy Handler. Performing a manipulation results in protection mechanism failure. Remote exploitation of the attac…","indicators":{"cves":["CVE-2026-112077"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T05:17:04.347Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/radareorg/radare2/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/radareorg/radare2/commit/18fd12efa98a7d1977de7bdd379d8a848777b90f","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/radareorg/radare2/issues/26861","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/radareorg/radare2/releases/tag/6.2.4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112077","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009600","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421756","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421756/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112078","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112078 — A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impact…","description":"A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change_info_ of the file webui.py. Executing a manipulation of the argument ckpt_path can lead to code injection. The attack can be executed remotely. The exploit has been published…","indicators":{"cves":["CVE-2026-112078"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T05:17:04.570Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/issues/2866","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32909432/rvc-train-log-eval-poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112078","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009621","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421757","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421757/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112079","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112079 — A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the func…","description":"A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. Th…","indicators":{"cves":["CVE-2026-112079"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T05:17:04.773Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/hankcs/HanLP/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/hankcs/HanLP/issues/1968","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32910161/hanlp-ddb1299-vocab-pickle-poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112079","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009644","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421758","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421758/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112080","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112080 — A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae…","description":"A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get_class_from_dynamic_module of the file examples/chat_gradio_no_merge.py of the component Adapter Config. The manipulation of the argument base_model_name_or…","indicators":{"cves":["CVE-2026-112080"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T05:17:04.993Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/LlamaChinese/Llama-Chinese/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/LlamaChinese/Llama-Chinese/issues/371","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32911069/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112080","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009706","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421759","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421759/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106014","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106014 — The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the…","description":"The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without actually paying.","indicators":{"cves":["CVE-2026-106014"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:17.607Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/30ccd424-a0a1-40a9-93ab-5def94eb0073/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106028","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106028 — The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization ch…","description":"The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and free-shipping coupons.","indicators":{"cves":["CVE-2026-106028"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:20.510Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/0865bdd3-8ce9-4a3b-a174-07076dee8565/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106933","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106933 — The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and regi…","description":"The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in the b…","indicators":{"cves":["CVE-2026-106933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:20.817Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/4f85834c-30e4-451f-9616-70dc8eaf9c41/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112081","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112081 — A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.…","description":"A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes deserialization. It is possible to initiate t…","indicators":{"cves":["CVE-2026-112081"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:22.430Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/hankcs/HanLP/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/hankcs/HanLP/issues/1969","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32911743/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112081","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009708","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421760","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421760/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112083","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112083 — A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function Wei…","description":"A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the a…","indicators":{"cves":["CVE-2026-112083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:23.377Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/sgl-project/sglang/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/42073","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/pull/44314","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112083","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1009919","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421762","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421762/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112086","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112086 — A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the…","description":"A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Handler. The manipulation of the argument _target_ results in deserialization. It is possible to launch the attack remotel…","indicators":{"cves":["CVE-2026-112086"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:23.667Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/espnet/espnet/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/espnet/espnet/commit/f217b24f06de55e332cab10231469d5890dbbe00","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/espnet/espnet/issues/6828","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/espnet/espnet/pull/6829","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32957363/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112086","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011320","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421831","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421831/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76739","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76739 — A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superd…","description":"A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem.","indicators":{"cves":["CVE-2026-76739"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:24.730Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05154en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-89286","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-89286 — The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log…","description":"The FormFlow for GoHighLevel (GHL)  WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the in…","indicators":{"cves":["CVE-2026-89286"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:25.050Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/e564870a-c124-4c11-90ba-907517155cd0/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91046","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-91046 — The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization…","description":"The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin through…","indicators":{"cves":["CVE-2026-91046"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:25.223Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/ed5271e4-3e8d-49b6-9118-2f4ef5116043/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91047","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-91047 — The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict acc…","description":"The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file.","indicators":{"cves":["CVE-2026-91047"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:25.390Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/08afea88-4268-40b3-b5fb-0ac2546c3100/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94273","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94273 — The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's respons…","description":"The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommerce order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without completing payment.","indicators":{"cves":["CVE-2026-94273"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:25.523Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/62c8b34a-44f3-4739-9ca6-fce0f2a5ffaf/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103311","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-103311 — The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify…","description":"The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment webhook notifications, because the shared secret used to validate the request signature is empty by default and nothing rejects an unconfigured secret, allowing u…","indicators":{"cves":["CVE-2026-103311"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:30.260Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/3d43ae6a-ca0d-49f9-aa3a-a584e5155efe/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106010","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-106010 — The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on i…","description":"The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route and treats unset credentials as valid, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid without payment in the default configuratio…","indicators":{"cves":["CVE-2026-106010"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:30.397Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/fba20275-4836-4f19-aad9-c6f4e2c53b88/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112087","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112087 — A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects s…","description":"A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a…","indicators":{"cves":["CVE-2026-112087"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:30.690Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/dnhddwhd/submit/issues/1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://itsourcecode.com/","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-112087","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011391","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421844","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421844/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112088","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112088 — A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319…","description":"A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli_query of the file farmers/add.php. Executing a manipulation of the argument f_no/f_id/f_name/f_locallity/f_ac/f_phone c…","indicators":{"cves":["CVE-2026-112088"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:30.873Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Dav-ee/dairy-management-system/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dav-ee/dairy-management-system/issues/2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112088","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011414","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421853","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421853/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112089","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112089 — A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a4…","description":"A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqli_query of the file employees/delete.php. The manipulation of the argument e_payroll_no leads t…","indicators":{"cves":["CVE-2026-112089"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:31.050Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Dav-ee/dairy-management-system/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dav-ee/dairy-management-system/issues/3","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112089","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011415","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421854","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421854/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74921","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74921 — The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shor…","description":"The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that exec…","indicators":{"cves":["CVE-2026-74921"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:31.613Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/b0b97661-c671-420c-8fca-22666862b379/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-74922","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-74922 — The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unau…","description":"The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.","indicators":{"cves":["CVE-2026-74922"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:31.760Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/850aaa4e-82ff-479f-bdcd-6cb8089325bd/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86791","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86791 — The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a pa…","description":"The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthenticated users to mark any unpaid order as paid and to rewrite its total.","indicators":{"cves":["CVE-2026-86791"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.043Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/04e70988-b0af-4f78-8e75-5e76976b1797/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94228","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94228 — The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its set…","description":"The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply.","indicators":{"cves":["CVE-2026-94228"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.320Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/fda8b7cb-2e7b-4aa1-9d9e-c6d93bf47332/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94229","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94229 — The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking befor…","description":"The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enumerate booking identifiers and retrieve the personal information of customers who booked an appointment, as well as inval…","indicators":{"cves":["CVE-2026-94229"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.450Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/6041298d-1e66-4fba-9cc1-7b55e591ffaf/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94230","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94230 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX…","description":"The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing unauthenticated users to create bookings at a price of their choosing and to attach them to arbitrary customer accounts…","indicators":{"cves":["CVE-2026-94230"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.580Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/05881cde-313e-47d5-a176-2b0b0051bca9/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94231","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94231 — The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of…","description":"The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking services and categories, including their prices.","indicators":{"cves":["CVE-2026-94231"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.710Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/d90ad3f4-4d58-43bc-8f17-0f6b8dfdde4f/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94272","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94272 — The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommer…","description":"The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to fail.","indicators":{"cves":["CVE-2026-94272"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.830Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/e3a4931a-3678-46ac-9ad0-3cc6a1ed5d90/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94294","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-94294 — The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation befor…","description":"The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its options and, on a separate unauthenticated request, redirecting the visitor's browser to a URI built from that stored data.","indicators":{"cves":["CVE-2026-94294"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.950Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/26ac49f1-657b-49ab-937b-1ceabde1e891/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111439","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111439 — 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存…","description":"在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadBinaryFileBlocksFirstCall()。该底层例程仅执行了路径规范化检查以及针对 .. 路径遍历和数据目录边界的基本检查，缺失了对调用者数据库权限（如 SELECT 权限）的校验。此外，辅助函数 is_row_data_fil…","indicators":{"cves":["CVE-2026-111439"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T08:17:02.130Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://gitcode.com/opengauss/openGauss-server/pull/9374","label":"a1a479f7-907b-4ae8-a999-9148cadc9224","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112090","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112090 — A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c6…","description":"A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function mysqli_real_escape_string of the file payment/pay.php. The manipulation of the argument f_no/farmer results in sql injecti…","indicators":{"cves":["CVE-2026-112090"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T08:17:02.813Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Dav-ee/dairy-management-system/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dav-ee/dairy-management-system/issues/4","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112090","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011469","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421855","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421855/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112091","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112091 — A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31…","description":"A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the file delivery/checkfarmer.json.php of the component AJAX Endpoint. This manipulation of the argument fname causes informat…","indicators":{"cves":["CVE-2026-112091"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T08:17:03.040Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Dav-ee/dairy-management-system/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dav-ee/dairy-management-system/issues/5","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112091","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011470","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421856","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421856/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112092","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112092 — A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07e…","description":"A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the function echo of the file doctorregistration.php of the component Doctor Registration. Executing a manipulation of the argument doc_name can lead to cross…","indicators":{"cves":["CVE-2026-112092"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T08:17:03.240Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/subhajitkhan/online-clinic-management-system/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/subhajitkhan/online-clinic-management-system/issues/6","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112092","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011790","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421901","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421901/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112094","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112094 — A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the funct…","description":"A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The pr…","indicators":{"cves":["CVE-2026-112094"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T08:17:03.623Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/michaelrsweet/mxml/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/michaelrsweet/mxml/issues/358","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32701825/poc_mxml_error_handling.tar.gz","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/32836547/mxml-fix-354-358.patch","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112094","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1011796","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421908","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421908/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111438","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111438 — 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/…","description":"在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_node_internal_connection()，直接调用 check_hba_replication()。check_hba_replication() 仅按 replication 标记做弱匹配，缺少普通 check_hba() 中的远程 trust 禁止等完整校验。因此，非内部网络的 HADR/SW 复制连接可绕过内部连接限制和完整 pg_hba 策略完…","indicators":{"cves":["CVE-2026-111438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:07.173Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://gitcode.com/opengauss/openGauss-server/pull/9757","label":"a1a479f7-907b-4ae8-a999-9148cadc9224","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112098","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112098 — A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of t…","description":"A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released to t…","indicators":{"cves":["CVE-2026-112098"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:07.917Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/deeppavlov/DeepPavlov/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/deeppavlov/DeepPavlov/issues/1713","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/33004686/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112098","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1012810","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421933","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421933/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110898","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110898 — Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential…","description":"Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.","indicators":{"cves":["CVE-2026-110898"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:45.753Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/essential-addons-for-elementor-lite/vulnerability/wordpress-essential-addons-for-elementor-plugin-6-8-5-privilege-escalation-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112100","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112100 — A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelin…","description":"A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.__init__ of the file deeppavlov/models/preprocessors/multitask_preprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried…","indicators":{"cves":["CVE-2026-112100"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:46.393Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/deeppavlov/DeepPavlov/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/deeppavlov/DeepPavlov/issues/1714","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/33004910/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112100","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1012812","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421958","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421958/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112101","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112101 — A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected e…","description":"A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboard of the component WebSocket Gateway. Executing a manipulation of the argument cwd can lead to origin validation error.…","indicators":{"cves":["CVE-2026-112101"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:46.610Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/BlackBeltTechnology/pi-agent-dashboard/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/BlackBeltTechnology/pi-agent-dashboard/commit/48fd0bad5adfe76af9736599699d51a5f60019f6","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/BlackBeltTechnology/pi-agent-dashboard/issues/625","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/BlackBeltTechnology/pi-agent-dashboard/pull/636","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/BlackBeltTechnology/pi-agent-dashboard/releases/tag/v0.9.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112101","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1012811","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421967","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421967/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112102","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112102 — A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFun…","description":"A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch the…","indicators":{"cves":["CVE-2026-112102"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:46.780Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/axa-group/nlp.js/issues/1380","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/33005641/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112102","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1012820","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421981","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421981/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-78163","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-78163 — Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Pa…","description":"Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component.\n\n\n\nThis issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.…","indicators":{"cves":["CVE-2026-78163"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:19.233Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-78163.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25596","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25733","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25744","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24422","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84176","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84176 — Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Ve…","description":"Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\n\ncreateCorsHandler() set Access-Control-Allow-Credentials: true outside the origin check, so th…","indicators":{"cves":["CVE-2026-84176"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:21.750Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-84176.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25820","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25937","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25938","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24436","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84178","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84178 — Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects…","description":"Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component.\n\n\n\nThis issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe authorization code callback did not carry a state parameter binding it to the authorization request that started the flow, a…","indicators":{"cves":["CVE-2026-84178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:21.917Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-84178.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25821","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25944","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25946","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24437","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84180","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84180 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative c…","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nWhen processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the result…","indicators":{"cves":["CVE-2026-84180"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:22.100Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-84180.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25685","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25835","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25836","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24428","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84181","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-84181 — Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Cam…","description":"Improper Authentication vulnerability in Apache Camel Shiro component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe Shiro security processor skipped credential verification when the subject already bound to the current thread carried the same principa…","indicators":{"cves":["CVE-2026-84181"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:22.250Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-84181.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25822","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25944","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25946","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24439","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85243","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85243 — Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. Thi…","description":"Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nunmarshal() verified the modification detection code only when the message was an OpenPGP symmetrically encrypted i…","indicators":{"cves":["CVE-2026-85243"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:22.367Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85243.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25848","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25944","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25946","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24441","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85245","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85245 — Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue…","description":"Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe Thrift data format unmarshalled incoming data into the shared defaultInstance of the target type rather than into a…","indicators":{"cves":["CVE-2026-85245"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:22.527Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85245.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25823","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25940","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25942","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24442","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85246","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85246 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina comp…","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nWhen processing of an exchange failed, the Mina consumer wrote exchange.getException() straight back over…","indicators":{"cves":["CVE-2026-85246"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:22.673Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85246.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25741","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25934","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25935","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24476","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85247","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85247 — Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects…","description":"Improper Certificate Validation vulnerability in Apache Camel Knative component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nWhen SSL was enabled on the Knative HTTP client but no truststore was configured, the client options fell back to trusting every pr…","indicators":{"cves":["CVE-2026-85247"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:22.820Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85247.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25824","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25944","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25946","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24443","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85248","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85248 — Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerab…","description":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component.\n\nThis issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\n\nThe producer held a single java.security.Signature instance and used it…","indicators":{"cves":["CVE-2026-85248"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:22.970Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85248.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25825","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25850","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25851","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24445","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85249","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85249 — Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Ca…","description":"Improper Input Validation vulnerability in Apache Camel Tika component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe Tika producer mapped every metadata key parsed out of the submitted document onto the Exchange as a header, with no filter applied. Docu…","indicators":{"cves":["CVE-2026-85249"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:23.117Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85249.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25819","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25940","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25942","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24423","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85254","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85254 — Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This is…","description":"Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe guard that prevents a request header being reflected into the response compared header names case sensitively, whil…","indicators":{"cves":["CVE-2026-85254"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:23.553Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85254.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25831","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25940","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25942","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24453","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85257","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85257 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF compo…","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nWhen a route behind a CXF SOAP consumer failed with an exception the service contract does not declare, th…","indicators":{"cves":["CVE-2026-85257"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:23.690Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85257.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25742","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25934","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25935","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24477","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85260","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85260 — Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This…","description":"Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe camel-mllp component carries a logPhi option that governs whether HL7 payload content may be written to the log.…","indicators":{"cves":["CVE-2026-85260"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:23.840Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85260.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25832","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25944","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25946","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24454","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85296","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85296 — Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue af…","description":"Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nSigning material belonging to an individual request was stored in state that is shared across requests rather than confined t…","indicators":{"cves":["CVE-2026-85296"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.000Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85296.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25641","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25869","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25870","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24429","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85300","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85300 — Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache…","description":"Incorrect Default Permissions vulnerability in Apache Camel PQC component.\n\nThis issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nWhen the component wrote generated key material to disk it did so with the permissions the process default umask produced, rather than r…","indicators":{"cves":["CVE-2026-85300"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.147Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85300.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25826","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25856","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25857","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24447","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85301","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85301 — Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache…","description":"Improper Authentication vulnerability in Apache Camel Keycloak component.\n\nThis issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\n\n\n\nThe security processor validated the issuer of an introspected token only when the introspection response actually carried an iss clai…","indicators":{"cves":["CVE-2026-85301"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.290Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85301.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25827","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25858","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25859","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24448","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85312","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85312 — Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Ca…","description":"Improper Input Validation vulnerability in Apache Camel Core component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe saga processor consulted a header named Long-Running-Action to decide which saga an exchange belonged to. The name carries no Camel pref…","indicators":{"cves":["CVE-2026-85312"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.427Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85312.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25828","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25940","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25942","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24449","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85313","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85313 — Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.…","description":"Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nSetting enableCORS on a Jetty endpoint installed Jetty's CrossOriginFilter with its stock defaults, which accep…","indicators":{"cves":["CVE-2026-85313"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.560Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85313.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25829","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25937","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25938","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24450","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85314","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85314 — Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Ca…","description":"Improper Input Validation vulnerability in Apache Camel Mail component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nCVE-2026-46584 addressed mail headers reaching the Exchange without passing through a header filter, but the MimeMultipart data format retai…","indicators":{"cves":["CVE-2026-85314"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.700Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85314.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25568","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25765","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25766","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24419","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85315","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85315 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC comp…","description":"Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nWhen a route behind a gRPC consumer failed, the exception's message was placed into the gRPC status descr…","indicators":{"cves":["CVE-2026-85315"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.837Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85315.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25839","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25934","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25935","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24478","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85316","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85316 — Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. Th…","description":"Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe component decided whether an endpoint ran in proxy mode by testing whether its configured path started with th…","indicators":{"cves":["CVE-2026-85316"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:24.973Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85316.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25833","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25940","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25942","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24455","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85317","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-85317 — Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This iss…","description":"Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nThe OAuth2 client token cache is global to the JVM, and its key omitted several of the fields that determine what a toke…","indicators":{"cves":["CVE-2026-85317"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:25.103Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-85317.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/25834","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25937","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/25938","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24456","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91858","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-91858 — FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.Transforme…","description":"FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance() and enabling only FEATURE_SECURE_PROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone…","indicators":{"cves":["CVE-2026-91858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:25.683Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://camel.apache.org/security/CVE-2026-91858.html","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/camel/pull/26108","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26168","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/camel/pull/26169","label":"security@apache.org","domainType":"primary"},{"url":"https://issues.apache.org/jira/browse/CAMEL-24605","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112107","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112107 — A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTens…","description":"A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely.…","indicators":{"cves":["CVE-2026-112107"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:17:00.937Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/user-attachments/files/33027393/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ztxz16/fastllm/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ztxz16/fastllm/issues/758","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112107","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013187","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422072","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422072/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112108","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112108 — A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer…","description":"A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has…","indicators":{"cves":["CVE-2026-112108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:17:01.197Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/user-attachments/files/33027563/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ztxz16/fastllm/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ztxz16/fastllm/issues/759","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112108","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013191","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422102","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422102/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112138","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112138 — A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::j…","description":"A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely. Th…","indicators":{"cves":["CVE-2026-112138"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:17:01.383Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/451","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112138","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013200","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422243","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422243/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112140","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112140 — A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40de…","description":"A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function _get_lib_module of the file python/mlc_chat/chat_module.py. The manipulation of the argument model_lib results in code injection. The attack may be launched remotely. The…","indicators":{"cves":["CVE-2026-112140"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:17:01.740Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/llSourcell/Doctor-Dignity/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/llSourcell/Doctor-Dignity/issues/37","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/user-attachments/files/33028284/poc.zip","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112140","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013205","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422245","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422245/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112210","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112210 — A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs…","description":"A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the privileg…","indicators":{"cves":["CVE-2026-112210"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:17:01.910Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112210","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555474","label":"secalert@redhat.com","domainType":"other"},{"url":"https://github.com/RedHatInsights/rhc/blob/51928db/data/systemd/rhc-canonical-facts.service","label":"secalert@redhat.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110363","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110363 — Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly…","description":"Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.","indicators":{"cves":["CVE-2026-110363"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:55.103Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/learnpress/vulnerability/wordpress-learnpress-plugin-4-4-10-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111831","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111831 — Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting In…","description":"Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.15.","indicators":{"cves":["CVE-2026-111831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:56.197Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/fluentform/vulnerability/wordpress-fluentform-plugin-6-2-15-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111836","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111836 — Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Ex…","description":"Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through 2.11.0.","indicators":{"cves":["CVE-2026-111836"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:56.323Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/fluent-community/vulnerability/wordpress-fluentcommunity-plugin-2-11-0-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111839","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111839 — Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-strea…","description":"Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7.","indicators":{"cves":["CVE-2026-111839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:56.440Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-broadcast-live-video-plugin-7-3-7-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111845","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111845 — Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-produc…","description":"Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0.","indicators":{"cves":["CVE-2026-111845"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:56.560Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/yith-woocommerce-product-bundles/vulnerability/wordpress-yith-woocommerce-product-bundles-plugin-2-29-0-broken-access-control-vulnerability-2?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112214","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112214 — A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index objec…","description":"A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large…","indicators":{"cves":["CVE-2026-112214"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:57.640Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112214","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555538","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-38671","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-38671 — Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegi…","description":"Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior (no fixed version available) allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint","indicators":{"cves":["CVE-2026-38671"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:58.047Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"http://banner.com","label":"cve@mitre.org","domainType":"other"},{"url":"http://ellucian.com","label":"cve@mitre.org","domainType":"other"},{"url":"https://gist.github.com/xAR191/7831b15a1a9b15f3fdbf6786a5b74c5e","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110008","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110008 — @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the st…","description":"@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier cookies are set without a Path attribute at a login route with two or more path segments, while the clearing step at the OAuth callback writes them with a root path, so the origi…","indicators":{"cves":["CVE-2026-110008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:16:57.527Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/fastify/fastify-oauth2/security/advisories/GHSA-7fcr-mwg4-pw9q","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110902","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-110902 — Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Ticke…","description":"Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.1.","indicators":{"cves":["CVE-2026-110902"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:16:57.680Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/event-tickets/vulnerability/wordpress-event-tickets-plugin-5-30-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111828","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111828 — Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listin…","description":"Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5.","indicators":{"cves":["CVE-2026-111828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:00.170Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-6-1-5-direct-static-code-injection-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111829","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111829 — Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio…","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0.","indicators":{"cves":["CVE-2026-111829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:00.300Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/wp-mailster/vulnerability/wordpress-wp-mailster-plugin-1-9-1-0-local-file-inclusion-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111883","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111883 — Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attacke…","description":"Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/reset. Attackers can lure an operator to a malicious page triggering cross-site GET requests, terminating running swarms…","indicators":{"cves":["CVE-2026-111883"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:00.437Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/locustio/locust/blob/2.46.7/locust/web.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/locustio/locust/commit/3a1d0caa5bde59494ede55f513fcb4becbf406a0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/locustio/locust/issues/3566","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/locust-through-2.46.7-csrf-via-web-ui-stop-and-stats-reset","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111899","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111899 — KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that…","description":"KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated household members to bypass IP filtering via a second unfiltered fetch. Attackers can host a page titled KitchenOwl at a URL matching /recipe/<id>. The follow-up requests.get() c…","indicators":{"cves":["CVE-2026-111899"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:00.590Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/TomBursch/kitchenowl/blob/v0.7.10/backend/app/service/recipe_scraping.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/TomBursch/kitchenowl/commit/292f6f50a8e8bfa487292e9fd0ea0c54a860c28f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/TomBursch/kitchenowl/issues/1169","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/kitchenowl-through-0.7.10-ssrf-via-recipe-import-scrapekitchenowl-fetch","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111915","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111915 — Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote a…","description":"Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlisted…","indicators":{"cves":["CVE-2026-111915"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:00.740Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/purocean/yn/blob/v3.93.0/src/main/server/index.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/purocean/yn/commit/d3b0ad27f7f6388b878eefd828557ae2d2a8789b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/purocean/yn/issues/543","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/purocean/yn/releases/tag/v3.93.1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/yank-note-before-3.93.1-path-traversal-via-api-help-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111925","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111925 — Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to a…","description":"Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because FileLibraryProvider.lookup() lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with f…","indicators":{"cves":["CVE-2026-111925"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:00.893Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/mopidy/mopidy/blob/v4.0.4/src/mopidy/_exts/file/library.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mopidy/mopidy/commit/f23c1f8621c3f4eb07a35d37fccb597449d36415","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mopidy/mopidy/issues/2350","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mopidy/mopidy/releases/tag/v4.0.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/mopidy-before-4.0.5-path-traversal-via-file-backend-library-lookup","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/mopidy/mopidy/issues/2350","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111936","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111936 — Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because valida…","description":"Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud met…","indicators":{"cves":["CVE-2026-111936"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:01.200Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/aleksey-hoffman/sigma-file-manager/blob/v2.2.0/src-tauri/src/extensions/filesystem.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aleksey-hoffman/sigma-file-manager/blob/v2.2.0/src-tauri/src/extensions/security.rs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aleksey-hoffman/sigma-file-manager/commit/45cedf892f800c6b140b0e3cd6e55fdbcf2cf479","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aleksey-hoffman/sigma-file-manager/issues/552","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sigma-file-manager-through-2.2.0-ssrf-via-extension-download-commands","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111937","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111937 — Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sa…","description":"Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Notification records due to absent permission hooks. Attackers can query frappe.client endpoints filtering on to_user or call mark_as_read with another user argume…","indicators":{"cves":["CVE-2026-111937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:01.350Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/frappe/crm/blob/v1.81.1/crm/api/notifications.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/blob/v1.81.1/crm/fcrm/doctype/crm_notification/crm_notification.json","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/blob/v1.81.1/crm/hooks.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/commit/a24d73acefa7f98f46903858514444442ce57614","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/releases/tag/v1.81.2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/security/advisories/GHSA-4rjw-6mxx-m345","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/frappe-crm-before-1.81.2-missing-authorization-on-crm-notification-records","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111938","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111938 — Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sa…","description":"Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other users' call logs by supplying arbitrary call_sid values. Attackers can call the add_note_to_call_log and add_task_to_call_log endpoints to attach attacker-written notes and t…","indicators":{"cves":["CVE-2026-111938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:01.503Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/frappe/crm/blob/v1.73.2/crm/integrations/api.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/commit/7872f4d178bd9338dba2eb4fc4808f4060914be6","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/commit/e30df91094033d8583a72e429726ba7bebc1534f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/releases/tag/v1.74.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/crm/security/advisories/GHSA-843p-qp2f-p2v8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/frappe-crm-before-1.74.0-missing-authorization-via-add-note-to-call-log","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111939","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111939 — Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticat…","description":"Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other customers by supplying a raised_by value. Attackers can call the hd_ticket.api.new endpoint with a victim's email to plant phishing tickets in the…","indicators":{"cves":["CVE-2026-111939"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:01.650Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/frappe/helpdesk/blob/v1.25.1/helpdesk/helpdesk/doctype/hd_ticket/api.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/helpdesk/blob/v1.25.1/helpdesk/helpdesk/doctype/hd_ticket/hd_ticket.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/helpdesk/commit/1186367f3616a605440e73e6a08eacbbcb9b92d9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/helpdesk/commit/c778f533b24b1dee0c75b206979a9bc4b1be0de2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/helpdesk/releases/tag/v1.26.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/frappe/helpdesk/security/advisories/GHSA-xf93-jjcj-44vm","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/frappe-helpdesk-before-1.26.0-authorization-bypass-via-raised-by-in-ticket-creation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112144","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112144 — A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4…","description":"A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has…","indicators":{"cves":["CVE-2026-112144"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:01.967Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/satya-vinay/Events-Management-System/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/satya-vinay/Events-Management-System/issues/6","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112144","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013213","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422249","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422249/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/satya-vinay/Events-Management-System/issues/6","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112222","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112222 — Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configu…","description":"Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744.","indicators":{"cves":["CVE-2026-112222"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:02.503Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://patchstack.com/database/wordpress/plugin/surferseo/vulnerability/wordpress-surfer-plugin-1-8-0-744-broken-access-control-vulnerability?_s_id=cve","label":"audit@patchstack.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112265","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112265 — LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauth…","description":"LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to inject forged Lark/Feishu events by skipping signature checks. Attackers knowing a bot UUID can POST fabricated im.message.receive_v1 or card.action.trigger events to drive the…","indicators":{"cves":["CVE-2026-112265"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:03.277Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/langbot-app/LangBot/blob/v4.11.0/src/langbot/pkg/api/http/controller/groups/webhooks.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/langbot-app/LangBot/blob/v4.11.0/src/langbot/pkg/platform/adapters/lark/adapter.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/langbot-app/LangBot/blob/v4.11.0/src/langbot/pkg/platform/sources/lark.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/langbot-app/LangBot/commit/43c481d74a6388657b84baa7d292c613c75c24f9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/langbot-app/LangBot/issues/2627","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/langbot-through-4.11.0-missing-lark-feishu-webhook-authenticity-verification","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112266","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112266 — SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort ot…","description":"SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering prefix-…","indicators":{"cves":["CVE-2026-112266"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:03.987Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/managers/scheduler.py#L5458-L5590","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/managers/tokenizer_manager.py#L2240-L2256","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/managers/tokenizer_manager.py#L2425-L2436","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/41474","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/45002","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sglang-through-0.5.22-cross-request-abort-via-rid-prefix-matching","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/sgl-project/sglang/issues/41474","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112267","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112267 — SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery v…","description":"SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker's…","indicators":{"cves":["CVE-2026-112267"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:04.160Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/conn.py#L1157-L1181","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/decode.py#L1150-L1175","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/45008","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sglang-through-0.5.22-ssrf-via-bootstrap-host-and-bootstrap-port-on-decode-worker","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/sgl-project/sglang/issues/45008","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112268","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112268 — sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that…","description":"sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to access mesh HA management routes because /ha/* endpoints skip control-plane Admin role checks. Attackers can read cluster topology, write gossiped configura…","indicators":{"cves":["CVE-2026-112268"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:04.320Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/sgl-model-gateway/src/server.rs#L641-L675","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/45006","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/pull/45017","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sglang-router-through-0.3.2-authorization-bypass-via-mesh-ha-management-routes","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112269","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112269 — SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode regist…","description":"SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowing denial of service. Network-adjacent attackers can send many registrations with unique mooncake_session_id values and large nested-buffer f…","indicators":{"cves":["CVE-2026-112269"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:04.467Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/utils.py#L47-L69","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L2885-L2935","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L889-L909","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/45012","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sglang-through-0.5.22-memory-exhaustion-via-unauthenticated-mooncake-decode-registrations","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/sgl-project/sglang/issues/45012","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112270","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112270 — SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory alloc…","description":"SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handle_staging_rsp() that lets unauthenticated network-adjacent attackers exhaust Prefill memory. Attackers can obtain the rank address from the /route endpoint and send STAGING…","indicators":{"cves":["CVE-2026-112270"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:04.627Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/staging_handler.py#L505-L548","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L2885-L2935","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sgl-project/sglang/issues/45014","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/sglang-through-0.5.22-memory-exhaustion-via-mooncake-staging-rsp-chunk-idx","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112271","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112271 — libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 s…","description":"libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exceeds the section. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or EDID file to mak…","indicators":{"cves":["CVE-2026-112271"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:04.787Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://gitlab.freedesktop.org/emersion/libdisplay-info","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.freedesktop.org/emersion/libdisplay-info/-/blob/0.4.0/displayid.c#L603-L689","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libdisplay-info-displayid-datablock-overrun-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libdisplay-info-through-0.4.0-heap-out-of-bounds-read-via-displayid-v1-parser","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/cve-2026-112271-112272-libdisplay-info-displayid-datablock-overrun-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112272","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112272 — Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section p…","description":"Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attackers to read past the EDID buffer via oversized data block lengths. Attackers can supply a crafted EDID from a malicious monitor, KVM, capture device, or file to…","indicators":{"cves":["CVE-2026-112272"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:04.937Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://gitlab.freedesktop.org/emersion/libdisplay-info","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.freedesktop.org/emersion/libdisplay-info/-/blob/0.4.0/displayid2.c#L84-L143","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libdisplay-info-displayid-datablock-overrun-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libdisplay-info-0.4.0-heap-out-of-bounds-read-via-displayid-v2-parser","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libdisplay-info-displayid-datablock-overrun-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112273","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112273 — libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns…","description":"libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a label ending exactly at the packet end. Attackers can deliver crafted DNS packets whose additional, answer, or authority r…","indicators":{"cves":["CVE-2026-112273"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:05.080Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/mfontanini/libtins","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mfontanini/libtins/blob/v4.6/src/dns.cpp#L338-L389","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/libtins-dns-name-parsing-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtins-through-4.6-heap-out-of-bounds-read-via-dns-compose-name","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112275","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112275 — Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun raste…","description":"Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md_image…","indicators":{"cves":["CVE-2026-112275"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:05.367Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://hackmd.io/@haindpwn/netpbm-sunraster-rle-oob-write-palette-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://netpbm.sourceforge.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/p/netpbm/code/5400/tree/advanced/converter/other/rast.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/p/netpbm/code/5400/tree/super_stable/converter/other/rast.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/netpbm-through-11.16.00-heap-out-of-bounds-write-via-rasttopnm-pr-load-image","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112276","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112276 — Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows at…","description":"Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent heap…","indicators":{"cves":["CVE-2026-112276"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:05.520Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://hackmd.io/@haindpwn/netpbm-sunraster-rle-oob-write-palette-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://netpbm.sourceforge.net/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/p/netpbm/code/5400/tree/advanced/converter/other/rast.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://sourceforge.net/p/netpbm/code/5400/tree/advanced/converter/other/rasttopnm.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/netpbm-through-11.16.00-heap-out-of-bounds-read-via-rasttopnm-colormap","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/cve-2026-112275-112276-netpbm-sunraster-rle-oob-write-palette-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112277","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112277 — rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap…","description":"rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to crash clients by sending malformed 32 bpp compressed bitmaps. Attackers can declare a large bitmap geometry with a short compressed body in bitmap update PDUs o…","indicators":{"cves":["CVE-2026-112277"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:05.663Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/rdesktop/rdesktop/blob/v1.9.0/bitmap.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rdesktop/rdesktop/issues/436","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rdesktop/rdesktop/pull/437","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/rdesktop-bitmap-decompress-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rdesktop-through-1.9.0-heap-out-of-bounds-read-via-process-plane","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/rdesktop/rdesktop/issues/436","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/rdesktop-bitmap-decompress-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112278","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112278 — rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in…","description":"rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows malicious RDP servers to crash clients. Attackers can send a raw bitmap cache order declaring large width, height, and bpp values with a tiny payload, causing memcpy() to read pa…","indicators":{"cves":["CVE-2026-112278"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:05.830Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/rdesktop/rdesktop/blob/v1.9.0/orders.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rdesktop/rdesktop/pull/437","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/rdesktop-bitmap-decompress-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rdesktop-through-1.9.0-heap-out-of-bounds-read-via-process-raw-bmpcache","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112279","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112279 — rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in or…","description":"rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 bitmap cache orders. Attackers can send an uncompressed order with large width/height or an underflowing mode nibble an…","indicators":{"cves":["CVE-2026-112279"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:05.977Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/rdesktop/rdesktop/blob/v1.9.0/orders.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rdesktop/rdesktop/issues/436","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rdesktop/rdesktop/pull/437","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/rdesktop-bitmap-decompress-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/rdesktop-through-1.9.0-heap-out-of-bounds-read-via-process-bmpcache2","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/rdesktop-bitmap-decompress-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112280","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112280 — libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser…","description":"libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory via an oversized caption data unit. Attackers can supply a crafted caption PES packet in a media file or broadcast stream, processed through arib_parse_…","indicators":{"cves":["CVE-2026-112280"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:06.117Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/nkoriyama/aribb24/blob/v1.0.3/src/parser.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/aribb24-caption-data-unit-and-csi-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libaribb24-aribb24-through-1.0.3-heap-buffer-overflow-via-parse-data-unit-statement-body","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112281","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112281 — libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_h…","description":"libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and o…","indicators":{"cves":["CVE-2026-112281"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:06.260Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/nkoriyama/aribb24/blob/v1.0.3/src/decoder.c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/aribb24-caption-data-unit-and-csi-oob-write","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libaribb24-through-1.0.3-stack-buffer-overflow-via-decoder-handle-csi","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/cve-2026-112280-112281-aribb24-caption-data-unit-and-csi-oob-write","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112282","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112282 — VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point()…","description":"VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num_ep_fine set to zero and an…","indicators":{"cves":["CVE-2026-112282"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:06.403Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://code.videolan.org/videolan/libbluray/-/blob/1.5.1/src/libbluray/bdnav/clpi_parse.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libbluray-clpi-ep-map-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/videolan-libbluray-through-1.5.1-out-of-bounds-read-via-clpi-access-point","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libbluray-clpi-ep-map-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112283","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112283 — VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_…","description":"VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bounds checking. Attackers can supply a crafted .clpi file on a disc, image, or directory with a huge num_point to exhaust…","indicators":{"cves":["CVE-2026-112283"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:06.550Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://code.videolan.org/videolan/libbluray/-/blob/1.5.1/src/libbluray/bdnav/clpi_parse.c","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libbluray-clpi-ep-map-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libbluray-through-1.5.1-uncontrolled-memory-allocation-via-parse-extent-start-points","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112285","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112285 — Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authe…","description":"Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to bypass coupon usage limits because usage is counted only when orders become paid. Attackers can place multiple pay-later orders while a usage remains, or cancel paid orders to in…","indicators":{"cves":["CVE-2026-112285"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:06.833Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/thelia/thelia/blob/3.2.3/core/lib/Thelia/Action/Coupon.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thelia/thelia/blob/3.2.3/core/lib/Thelia/Domain/Promotion/Coupon/Service/CouponManager.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thelia/thelia/blob/3.2.3/core/lib/Thelia/Domain/Promotion/Coupon/Service/OrderCouponUsageManager.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thelia/thelia/commit/1c3ed9c7ad57fec8ea959aa2d2f506f9892777ea","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thelia/thelia/commit/edb7078bfce5ea31b40868d340b0b49dcc6cf00c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thelia/thelia/releases/tag/3.1.5","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thelia/thelia/releases/tag/3.2.4","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/thelia/thelia/security/advisories/GHSA-pq5m-7g9w-ppg8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/thelia-before-3.1.5-and-3.2.4-coupon-usage-limit-bypass-via-pay-later-orders","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112286","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112286 — Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope…","description":"Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve qu…","indicators":{"cves":["CVE-2026-112286"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:06.990Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Admin/src/Http/Controllers/Quote/QuoteController.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/pull/2683","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/krayin-crm-before-2.2.7-idor-via-quote-search-and-lead-products-endpoints","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112289","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112289 — Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff user…","description":"Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.link_to_task(). Attackers can embed HTML or script that executes when administrators open the task changelist or change f…","indicators":{"cves":["CVE-2026-112289"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:07.460Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/KoalixSwitzerland/koalixcrm/blob/1.14.0/koalixcrm/crm/reporting/task.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/KoalixSwitzerland/koalixcrm/issues/444","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/koalixcrm-through-1.14.0-stored-xss-via-task-title-in-django-admin","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/KoalixSwitzerland/koalixcrm/issues/444","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112290","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112290 — Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 con…","description":"Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting vulnerability in ic-tree-item that re-parses router-item slot text as HTML. When tree item truncation is enabled, attackers who influence a tree item label can h…","indicators":{"cves":["CVE-2026-112290"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:07.600Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/aaronamran/Public-Vulnerability-Disclosures/blob/main/2026/dom-xss-mi6-ic-ui-kit/README.md","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mi6/ic-ui-kit/blob/7b32c7c2b53b74a915f40984fb7b0a2d825fc49c/packages/canary-web-components/src/components/ic-tree-item/ic-tree-item.tsx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mi6/ic-ui-kit/commit/e0eb0f16597dcb994a75c5230cd9243647ad7b3d","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/mi6-ukic-canary-web-components-3.0.0-canary.12-before-3.0.0-canary.48-dom-xss-via-ic-tree-item","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112291","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112291 — Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on t…","description":"Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem paths,…","indicators":{"cves":["CVE-2026-112291"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:07.753Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/flarum/framework/blob/v2.0.0-beta.6/extensions/package-manager/src/Api/Resource/TaskResource.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/flarum/framework/commit/257989e71fd8cc7ddab20f31dcde1aa760b1a08f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/flarum/framework/issues/4386","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/flarum/framework/releases/tag/v2.0.0-beta.8","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/flarum-extension-manager-2.0.0-beta.1-before-2.0.0-beta.8-missing-authorization-via-task-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112293","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112293 — BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that…","description":"BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner team members to manage billing because payment routes skip the team_payments permission check. Authenticated MEMBER or ADMIN users can call create-portal-link, create-checkout-sessio…","indicators":{"cves":["CVE-2026-112293"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:08.073Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/boxyhq/saas-starter-kit/blob/v1.6.0/lib/permissions.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/boxyhq/saas-starter-kit/blob/v1.6.0/pages/api/teams/%5Bslug%5D/payments/create-checkout-session.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/boxyhq/saas-starter-kit/blob/v1.6.0/pages/api/teams/%5Bslug%5D/payments/create-portal-link.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/boxyhq/saas-starter-kit/blob/v1.6.0/pages/api/teams/%5Bslug%5D/payments/products.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/boxyhq/saas-starter-kit/issues/2511","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/boxyhq-saas-starter-kit-through-1.6.0-missing-authorization-on-team-payment-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112294","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112294 — FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.count…","description":"FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows authenticated users to modify other users' content rows because checkRowOwner never verifies ownership. Any registered user can send requests to /ucenter/action/{modelCode}/{id}/count…","indicators":{"cves":["CVE-2026-112294"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:08.220Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/sunkaifei/FlyCms/blob/edfdf724c3b944310f60c29aa755d03a00a75837/backend/src/main/java/com/flycms/module/model/service/ActionService.java","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sunkaifei/FlyCms/blob/edfdf724c3b944310f60c29aa755d03a00a75837/backend/src/main/java/com/flycms/web/front/ActionController.java","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sunkaifei/FlyCms/issues/19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/flycms-through-commit-edfdf724-missing-authorization-via-action-counter-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112295","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112295 — FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated us…","description":"FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields to /ucenter/account_update. Attackers can change their review status, rename themselves, or duplicate another account's…","indicators":{"cves":["CVE-2026-112295"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:08.363Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/sunkaifei/FlyCms/blob/edfdf724c3b944310f60c29aa755d03a00a75837/backend/src/main/java/com/flycms/module/user/service/UserService.java","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sunkaifei/FlyCms/blob/edfdf724c3b944310f60c29aa755d03a00a75837/backend/src/main/java/com/flycms/web/front/UserController.java","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sunkaifei/FlyCms/blob/edfdf724c3b944310f60c29aa755d03a00a75837/backend/src/main/resources/mapper/user__UserDao.xml","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/sunkaifei/FlyCms/issues/19","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/flycms-through-commit-edfdf724-mass-assignment-via-ucenter-account-update","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112147","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112147 — A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an…","description":"A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made pub…","indicators":{"cves":["CVE-2026-112147"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:16:56.830Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/ai-genius-automations/octoally/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ai-genius-automations/octoally/commit/3898085c4e701be21377ebd9e91e10b941e47168","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ai-genius-automations/octoally/issues/24","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ai-genius-automations/octoally/releases/tag/v1.0.88","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112147","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013490","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013491","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422254","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422254/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112328","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112328 — The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the…","description":"The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX handler that allows authenticated Teacher-role attackers to assign module taxonomy terms to arbitrary courses by supplying a crafted course_id, since the handler validates onl…","indicators":{"cves":["CVE-2026-112328","CVE-2026-112329"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:06.280Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://senseilms.com/release-notes/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sensei-lms-broken-access-control-via-add-new-module-term-ajax","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sensei-lms-broken-access-control-via-save-new-message","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86375","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-86375 — Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive D…","description":"Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.","indicators":{"cves":["CVE-2026-86375"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:17:08.607Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000510641/dsa-2026-423-security-update-for-dell-application-installer-for-a-missing-encryption-of-sensitive-data-vulnerability","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107566","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107566 — Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set…","description":"Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allows an authenticated user to make the server send mail as any address, DKIM-signed where the address is at a domain the s…","indicators":{"cves":["CVE-2026-107566"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.460Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/83","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107568","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-107568 — Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply a…","description":"Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allows an authenticated user to send mail through the server as any address. A Sieve notify sends a notification message, and its :from tag…","indicators":{"cves":["CVE-2026-107568"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.717Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gitlab.com/hmailserver/hmailserver/-/releases/v6.3.7","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/hmailserver/hmailserver/-/work_items/82","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109433","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109433 — Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerabili…","description":"Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks due to an inverted comparison logic in AbstractCockpitPluginResource.isPermissionDisabled(). Attackers with min…","indicators":{"cves":["CVE-2026-109433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:02.623Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codeant.ai/security-research/camunda-cockpit-disabled-permissions-cve-2026-109433","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://docs.camunda.org/enterprise/download/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/camunda-broken-access-control-via-cockpit","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112158","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112158 — A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the functi…","description":"A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this…","indicators":{"cves":["CVE-2026-112158"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.917Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112158","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/956852","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422285","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422285/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112303","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112303 — GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers…","description":"GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile() to send the cookie to…","indicators":{"cves":["CVE-2026-112303"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:06.107Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/4ian/GDevelop/blob/v5.6.284/newIDE/app/src/ProjectsStorage/LocalFileStorageProvider/LocalFileResourceMover.js","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/4ian/GDevelop/blob/v5.6.284/newIDE/electron-app/app/LocalFileDownloader.js","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/4ian/GDevelop/commit/fbb01f40a640c35c6064f827065eda00e5608690","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/4ian/GDevelop/issues/9257","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gdevelop-through-5.6.284-cookie-leak-via-localfiledownloader-resource-urls","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112310","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112310 — docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attacke…","description":"docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allow_image_file_uri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit…","indicators":{"cves":["CVE-2026-112310"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.203Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/common/reference.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/blob/v2.102.0/docling_core/types/doc/document.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/commit/f952fc5d4c68fb673043c7c9f9c4390052959517","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/pull/900","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/releases/tag/v2.103.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/docling-project/docling-core/security/advisories/GHSA-jx5c-6gmw-72m3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/docling-core-through-2.102.0-local-file-disclosure-via-plain-path-imageref","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112363","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112363 — Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker…","description":"Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks via URL userinfo parsing differences. Attackers can set fetch_ssl_certificate=true with crafted userinfo URLs so SSLCerti…","indicators":{"cves":["CVE-2026-112363"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.350Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/unclecode/crawl4ai/blob/v0.9.5/crawl4ai/async_crawler_strategy.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/unclecode/crawl4ai/blob/v0.9.5/crawl4ai/ssl_certificate.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/unclecode/crawl4ai/blob/v0.9.5/deploy/docker/utils.py","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/unclecode/crawl4ai/pull/2304","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/crawl4ai-0.8.7-through-0.9.5-ssrf-bypass-via-sslcertificate-from-url-url-userinfo","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-13173","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-13173 — Tokens associated with user sessions are not revoked when the corresponding user session is terminat…","description":"Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initiated. This occurs when the session-bound token feature is enabled with token binding validation and the \"Revoke token upon user logout\" option is not active. The…","indicators":{"cves":["CVE-2025-13173"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.183Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4727/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-13591","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-13591 — The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response wh…","description":"The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate between valid and invalid usernames. This difference in responses can be leveraged to enumerate existing user accounts.…","indicators":{"cves":["CVE-2025-13591"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.413Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4583/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-6623","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-6623 — The carbon console accepts user-supplied XML input without sufficiently encoding potentially executa…","description":"The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts.\n\nSuccessful exploitation allows a remote attacker to execute arbitrary JavaScript in the context of a victim's browser, leading to actions…","indicators":{"cves":["CVE-2025-6623"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.797Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/wso2/carbon-analytics-common/pull/870","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"primary"},{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4316/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-7043","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-7043 — The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be t…","description":"The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use for consuming protected resources. This bypasses the intended security control that requires valid client credentials in addition to a refresh token to…","indicators":{"cves":["CVE-2025-7043"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:16:59.993Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4337/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-7203","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-7203 — The Management Console and product files expose sensitive data, including remote log server credenti…","description":"The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because the system does not sufficiently protect or obscure these credentials when the remote logging feature is enabled.…","indicators":{"cves":["CVE-2025-7203"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.157Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4369/","label":"ed10eef1-636d-4fbe-9993-6890dfa878f8","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111061","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111061 — russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Pr…","description":"russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSH_AGENT_CONSTRAIN_LIFETIME record in a constrained add-key request. The loop accepts repeated lifetime records, clones the…","indicators":{"cves":["CVE-2026-111061"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.080Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Eugeny/russh/commit/4c305033d72f8e5dd21a3fd4c53a6c291a16ebd1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Eugeny/russh/releases/tag/v0.64.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-4wc5-f2rc-q74m","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Eugeny/russh/security/advisories/GHSA-4wc5-f2rc-q74m","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112159","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112159 — A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an u…","description":"A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclos…","indicators":{"cves":["CVE-2026-112159"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:13.947Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://gist.github.com/Seikruun/b628bb6d4403d9c41a54a4b92d775583","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/commit/fcf2904cdb884230e9676f50f37a44d09fa97040","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/pull/17500/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/jumpserver/jumpserver/releases/tag/v5.0.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112159","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/964676","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422286","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422286/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112190","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112190 — A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some…","description":"A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insertion of sensitive information into debugging code. The attack may be launched remotely. The exploit has been disclosed pu…","indicators":{"cves":["CVE-2026-112190"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:14.140Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/KaranParelkar/Auresus_vulnerability/blob/main/Information_Disclosure/Readme.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112190","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/973094","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422295","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422295/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112195","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112195 — A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown funct…","description":"A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The explo…","indicators":{"cves":["CVE-2026-112195"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:14.533Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/jasonbernier/Dialplan-Escape-RCE/blob/main/exploit.py","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112195","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984968","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422297","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422297/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11828","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11828 — IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unenc…","description":"IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.","indicators":{"cves":["CVE-2026-11828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:16.130Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11829","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11829 — IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.","indicators":{"cves":["CVE-2026-11829","CVE-2026-12343"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:16.457Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11831","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11831 — IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very li…","description":"IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when processing a specially crafted client request.","indicators":{"cves":["CVE-2026-11831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:16.790Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12155","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12155 — IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially craft…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference.","indicators":{"cves":["CVE-2026-12155"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:17.447Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12350","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12350 — IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially cra…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process.","indicators":{"cves":["CVE-2026-12350"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:18.107Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12670","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12670 — IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafte…","description":"IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set conversion.","indicators":{"cves":["CVE-2026-12670"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:19.440Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12727","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-12727 — IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by…","description":"IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names.","indicators":{"cves":["CVE-2026-12727"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:19.770Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14511","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-14511 — IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sen…","description":"IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications.","indicators":{"cves":["CVE-2026-14511"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:20.110Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290859","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15661","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-15661 — IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due…","description":"IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.","indicators":{"cves":["CVE-2026-15661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:20.237Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-55667","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-55667 — A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV…","description":"A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.","indicators":{"cves":["CVE-2025-55667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.337Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/e6d01820d7bf3967d931fedb379ee5f209bc133b","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3321","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/57/57_dump_isom_saps_filedump_c_1743","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/117456648463009125","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/gpac/gpac/issues/3321","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"},{"url":"https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/57/57_dump_isom_saps_filedump_c_1743","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111757","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-111757 — Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 un…","description":"Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic can interpret a malformed percent-encoded path differently from upstream routing middleware and bypass protection for a static prefix. The root cause is serveStatic decodes a…","indicators":{"cves":["CVE-2026-111757"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:00.407Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/honojs/hono/commit/8b05c774ef1555c70f5ba5e2991b7e77cc3635cc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/honojs/hono/security/advisories/GHSA-5r4p-p66f-jhc7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/honojs/hono/security/advisories/GHSA-5r4p-p66f-jhc7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112247","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112247 — A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Manage…","description":"A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation of…","indicators":{"cves":["CVE-2026-112247"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:04.260Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Rookie506/CVE/issues/1","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112247","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986348","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422321","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422321/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112248","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112248 — A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the fun…","description":"A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Import. The manipulation of the argument Picture1/Picture2/Picture3 leads to path traversal. The attack can be initiated rem…","indicators":{"cves":["CVE-2026-112248"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:04.453Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/grandnode/grandnode2/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/commit/2abbaed232080ad74949c6f35581f0351e309972","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/pull/862","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/releases/tag/2.4.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/security/advisories/GHSA-8wj3-7vmm-69rj","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112248","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986349","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422322","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422322/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-11319","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-11319 — TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in…","description":"TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename via…","indicators":{"cves":["CVE-2026-11319"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:05.660Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/actuator/com.ticktick.task/","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/ticktick-android-path-traversal-via-sharereceiveactivity","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-1510","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-1510 — IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.","description":"IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.","indicators":{"cves":["CVE-2026-1510"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:06.833Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3161","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-3161 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that co…","description":"IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.","indicators":{"cves":["CVE-2026-3161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.140Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290183","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3628","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-3628 — IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.","description":"IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.","indicators":{"cves":["CVE-2026-3628"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.510Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-4405","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-4405 — IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by anothe…","description":"IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.","indicators":{"cves":["CVE-2026-4405"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.633Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-4413","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-4413 — IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an un…","description":"IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","indicators":{"cves":["CVE-2026-4413"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.753Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-4418","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-4418 — IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated…","description":"IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.","indicators":{"cves":["CVE-2026-4418"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.880Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7290183","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109434","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109434 — Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows re…","description":"Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attackers c…","indicators":{"cves":["CVE-2026-109434"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:19.650Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.fenrir-inc.com/jp/news/2026/10/15/sleipnir-mobile-for-android-3-9-0/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/sleipnir-browser-fullscreen-address-bar-spoofing","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112251","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112251 — A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRe…","description":"A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of the component Reverse Proxy. Performing a manipulation of the argument token results in open redirect. The attack can be initiate…","indicators":{"cves":["CVE-2026-112251"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:26.953Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://drive.google.com/drive/folders/1fvX6wjfHd58SzCAZd5-4Zn-mh9jqx8mz?usp=drive_link","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/cve/CVE-2026-112251","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986376","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422332","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422332/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112259","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112259 — A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause…","description":"A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application.","indicators":{"cves":["CVE-2026-112259"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:27.330Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112259","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555595","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112254","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112254 — A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is t…","description":"A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_html of the file locations/services/property_url_importer.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The…","indicators":{"cves":["CVE-2026-112254"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:52.800Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/agit8or1/clientst0r/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/agit8or1/clientst0r/commit/7e75c6cc6a07621c10be9b07fafd99e89a02e327","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/agit8or1/clientst0r/releases/tag/v3.17.587","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112254","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986798","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422335","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422335/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112297","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112297 — A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the func…","description":"A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprints/api/llm.py of the component LLM Configuration Handler. This manipulation of the argument base_url causes server-side request forgery. The attack can be initi…","indicators":{"cves":["CVE-2026-112297"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:53.620Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-112297","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986822","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422342","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422342/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112771","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112771 — Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass becau…","description":"Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index, where, and multisort filters resolve caller-supplied keys via ArrayHelper::getValue() without consulting the sandbox security policy. Authenticated Contr…","indicators":{"cves":["CVE-2026-112771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:54.203Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/craftcms/cms/security/advisories/GHSA-j697-8x93-7mp2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/craft-cms-before-4.18.8-and-5.11.0-twig-sandbox-allowlist-bypass-via-array-filters","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112781","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112781 — Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page edito…","description":"Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding config-*@ directives to page frontmatter forms. Attackers with page-edit permission can bypass the Twig sandbox config_denied_paths redaction to expose sec…","indicators":{"cves":["CVE-2026-112781"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.633Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/getgrav/grav/security/advisories/GHSA-8wwq-x3w5-fxmw","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/grav-2.0.0-before-2.2.2-information-disclosure-via-form-config-directives","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112299","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112299 — A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affec…","description":"A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side request…","indicators":{"cves":["CVE-2026-112299"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.500Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/smrealms/smr/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/smrealms/smr/commit/cb402e7f4e70b617b59d8c55dbe926b951ceb4a8","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/smrealms/smr/pull/2579","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112299","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986838","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422345","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422345/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112300","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112300 — A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is th…","description":"A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informe…","indicators":{"cves":["CVE-2026-112300"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.677Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/DiffSK/configobj/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/DiffSK/configobj/issues/281","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112300","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/989395","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422346","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422346/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112302","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112302 — A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function Archiv…","description":"A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been made…","indicators":{"cves":["CVE-2026-112302"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.033Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://gist.github.com/0xSebin/90d210e703f880d59dbde243fae3aa75","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112302","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/987582","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422348","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422348/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112395","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112395 — Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read pa…","description":"Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-copy…","indicators":{"cves":["CVE-2026-112395"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.880Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/76869efdbbf2ad7dccd7536520fb61b7a00ab61e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-462x-pgg6-55fp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-76787","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-76787 — The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library…","description":"The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgmt/updatehub/updatehub.c). The decoder treats every descriptor field as optional — json_obj_parse() returns a bitmask of the fields it actually decoded and never…","indicators":{"cves":["CVE-2026-76787"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:18:01.230Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/6fc4f27a74021b52c509e4f7912d68145dfa7728","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-82gq-cmqw-xgx2","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112358","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112358 — A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. T…","description":"A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function get_img_from_url of the file ApiBillet/serializers.py of the component APIv1. Executing a manipulation of the argument img_url/image_url can lead to server-side…","indicators":{"cves":["CVE-2026-112358"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.020Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://vuldb.com/cve/CVE-2026-112358","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986821","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422393","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422393/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112361","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112361 — A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function…","description":"A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component CSP. Such manipulation leads to protection mechanism failure. The attack can be executed remotely. Upgrading to version 24.0.0 is sufficient to resolv…","indicators":{"cves":["CVE-2026-112361"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.400Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/Dolibarr/dolibarr/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dolibarr/dolibarr/commit/9f9ffa288d4ad2632c1d5dd88272c699a592f4ec","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Dolibarr/dolibarr/releases/tag/24.0.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112361","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/990315","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422397","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422397/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112396","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112396 — Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when…","description":"Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to BytesIO, libtiff can reject a tag during encoding in ImagingLibTiffEnc…","indicators":{"cves":["CVE-2026-112396"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.837Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/dc95da20207827a062cfbf551ee9f6031465a8bb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-4rr5-89j8-mwwm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-36061","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-36061 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.","indicators":{"cves":["CVE-2025-36061"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.097Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292612","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-36069","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-36069 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.","indicators":{"cves":["CVE-2025-36069"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.533Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292613","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-36252","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2025-36252 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.","indicators":{"cves":["CVE-2025-36252"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:35.660Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292611","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112372","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112372 — A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile o…","description":"A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be…","indicators":{"cves":["CVE-2026-112372"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.173Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/importprofile_arbitrary_file_write","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112372","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983539","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422420","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422420/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19178","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19178 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to g…","description":"IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.","indicators":{"cves":["CVE-2026-19178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.590Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292610","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19595","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-19595 — The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c v…","description":"The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the…","indicators":{"cves":["CVE-2026-19595"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.717Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/bea93400138362691403b7f81de1e9048681547d","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7337-mc44-5wjm","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77684","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77684 — The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not…","description":"The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ev…","indicators":{"cves":["CVE-2026-77684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:37.197Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/zephyrproject-rtos/zephyr/commit/59c947c71f3d9ab4cf10fd28846e6ca4a3d53819","label":"vulnerabilities@zephyrproject.org","domainType":"primary"},{"url":"https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hc6x-8gm2-2r9v","label":"vulnerabilities@zephyrproject.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112373","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-112373 — A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function…","description":"A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.…","indicators":{"cves":["CVE-2026-112373"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:17:30.750Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112373","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/983540","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422421","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422421/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109441","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-109441 — LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' s…","description":"LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenan…","indicators":{"cves":["CVE-2026-109441"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:10.240Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/ginlix-ai/LangAlpha/blob/435a5a44fabdeb33e409a62d233a936d96241c86/src/ptc_agent/config/core.py#L295","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-109441","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/langalpha-through-2026.09.07-cross-tenant-sandbox-exposure-via-shared-docker-bridge","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77938","source":"nvd","category":"vulnerability","severity":"medium","title":"CVE-2026-77938 — Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tool…","description":"Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full server environment. Attackers can run code via POST /v1/tools/run or custom tools to read LETTA_PG_URI, POSTGRES_PASSWORD, a…","indicators":{"cves":["CVE-2026-77938"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.410Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/letta-ai/letta/blob/1131535716e8a31c9a437f8695e25ac98f203a24/letta/services/tool_sandbox/base.py#L487","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.lasso.security/vulnerability-database/cve-2026-77938","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/letta-through-0.16.8-credential-exposure-via-tool-sandbox-environment-inheritance","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"threatfox-1974956","source":"threatfox","category":"threat-intel","severity":"medium","title":"payload: undefined","description":"https://www.virustotal.com/gui/file/d0b369d8b76bd0da97fa2baacb82f9cd444b9ead8d850a8aa68e86b84b1e387b","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["Loader","macho","SNOWLIGHT","elf","Vshell","Mirai","cowrie","honeypot","upx","x86","Gafgyt","etherhiding","freight-lure","NodeJS","RAT","VNC","Amos","ClickFix","Foxveil","frame97","macOS","frame","nova","haven","chant","willow","quill","exe","remcos","RemcosRAT","AgentTesla","ps1","Sh","IoT","AUR","CHAOS","DirtyBlanket","linux","systemd-fontd","0xf00dbeef","CorePayloadManager","Coruna","ios","analystic","DarkSword","GHOSTBLADE","P7","salted-hash","Bashlite","Ngioweb","xorddos","ACR","ACRStealer","fake game","ROM","setup.exe","setup.py","fake game setup","js","QuasarRAT","masslogger","Formbook","asyncrat","cloaked","Dropper","MacSync","dll","Flame","SalatStealer","stealer","cve-2026-96656","miner","plex","Android","GhostBat","ghostx-panel","mParivahan","veltrix","caira","CLOUDHAZE","PageStone","QuartzLine","fake-git","Discord","encrypted","iraenc","gitlab","RUST","IRC","k4_irc_bot","onlycn","ROOTKIT","jar","minecraft","mod","Shell","doc8","python","wraith","RevStealer","HTA","codec-cache","Keylogger","VIPKeylogger","Alien","powershell","UNC7072","auditpolcore","DLL-sideloading","OVH","Python39.rar","DvnX","unpacked","WARDENStealer","YapStealer","rozena","GravityRAT","armv5","DDoS","go","legea","x86_64","MIPS","armv7","mips64","arm64","mipsle","sideloading","Qt5Widgets","TeamSpeak","bingads","Expiro","fba","pdf-suite","UnifyInstaller","dropped-by-OffLoader","acrobat","ppc_free_pdfsuite","puwaders","store-decoy","ChatGPT","CoinMiner","Amadey","FlyLegitBot","Vidar","DDoSAgent","Remus","P2PInfect","appk","sshdkit","SSHDoor","Bobik","clipbanker","54e64e","dropped-by-amadey","LummaStealer","ZigClipper","dropped-by-RemusStealer","zeus","xmrig","MillenuimRAT","runelure","file-size-evasion","masquerading","terminalfix","token-impersonation","dll-sideloading-adjacent","njrat","arc","317106","cred.dll","plugin","backdoor","x86-64","ssh-honeypot","shem","mipsel","RustyStealer","BlankGrabber","BlankStealer","Electron-ASAR","ExFiles","flomo-abuse","HijackLoader","infostealer","fake-ai-tool","jcef","crypto-targeting","persistence","token-theft","encrypted-payload","ARM","hajime","Downloader","botnet"],"malwareFamily":"Unknown Loader","confidence":100,"publishedAt":"2026-10-20T02:54:39Z","fetchedAt":"2026-10-20T03:00:02.155Z","references":[{"url":"https://www.virustotal.com/gui/file/d0b369d8b76bd0da97fa2baacb82f9cd444b9ead8d850a8aa68e86b84b1e387b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3783de51bd31420e5b2544e052058efe6d3330938831523e454856c257fef444","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4015e605fb7ff472d208169a3b89ba16b18be92d2345dfb707985aef364f63dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ed95369412065c36857f688d4cd1530c6d17bac292eb424dfa855ab1df349caf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9e6f74ea5ec27c36957a4392386c63e0103b2d7a8d237ad019ba1ebd19df8902","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2e1c133f28b1d0ff70cfdf24f59263412f2323ab16bc35c8d910d441e848c0e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/718d3907daebcebc65c36c06aa3c9f8d856f41b77c43e809379a1fbc4a5bf91e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/863ea1012d1379896cba11f581f4a8e8c86143297f5cdf4c432a8d652a717107","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/59ceb687992caf95100ee00925779ec35cc4a5767ee70013fed7050904fad6b1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/48b459aa71abce3bced9fc970e798f5f4652b3771f1db6e5e454596f3261831f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d27a01fc7400b31811c99f467677beb2aa742bf52d23fc57faae7a276abe674a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7e7d9bb3a750416b663cae2ffcb65c299af1c2cbd99e3fb9012b8af7f8de432f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/164753076cb20daa839ed963818cd468d095fa148cef1adfa897a30077452816","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4ba5aa5bf31d9066dff8a63a7dfaa241482bd5599ea312f979b68e2f50ec3d96","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f940436cb501da7b8d174699670083eedff857ccfc93eba66c40ae602237ac85","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ac4484f6139484fd0099d9fa54d6feebb91c26418f4e7aed9eba6185da58b7d4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/392070b982e06331e6daaa38cc8bd713b6f47b5f884d2973a908b6190cf44d90/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/706c3b12e8be63504ef14663eb7084a2d14587419166918f2fe32cfe55d78ee8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/f59d0a5f63972619bb2c5184cecbe7d4fc59d5e291ede27ba13acbe49dab839b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/407902441438f0f73a0ce5f5b89f50f9b6fcf7551a6179617fa21efac1cd524f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2d6f829d87773207cabc9360f8aae81adcf838829be00b0b6040fb7ebccf393e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/2f4b6d386a70eea4d5aaa951b8a9095095410cef0963b4a769aa9cc4b7e356a0/","label":"ThreatFox","domainType":"primary"},{"url":"https://honeylabs.net/lookup/59.96.138.199:47242","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/493957ce31fc19e5982557cd30a2dfc2f7377b0eeb081ee0cb37faab59d40c71","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/31c2bb78646d445f04a82dcbdedab9dec88131f41974ea08c8064212d3646d08","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f34500a7e65e36f852c2e53f980bd66d8390b16472082ef231a00195ea364709","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eff9564d3f458884501c4f2431650a0366759489275cd26f92d1c54f43bbd244","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/591c35f12f34a681462a3507690dfa355700747486f1ace25b34468936b00b81","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eb6025c6b535ac7073dc4840e7d1ce348c03bc03afa9bf66bc6ff56057c9fe3b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e3efe3a90dbddf23bda1dfacb089fa2df42b0e4851559609c502d951f45f6b24","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bf62ecfac9d5e8b71be6d920033ad87df03e570385c2f6bfbe3923ccaa96e70b","label":"ThreatFox","domainType":"other"},{"url":"https://www.bleepingcomputer.com/news/security/fake-arch-linux-packages-push-malware-with-root-privileges/","label":"ThreatFox","domainType":"media"},{"url":"https://www.virustotal.com/gui/file/ef2f81988ce0bb0aaf32e9a68780109e8756d94bbc3273182ffdb3892edb5930","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dcc726b0493bd2d9a06a1ebf0d0687091c2ef08b0091ea2a50da50eb1efd65ac","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7becf99286d1775255d5ba2b366d0576849cfb5250b3a61b7164991a03d75369","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24a5c95971bff0b40d4e0596af1d9dba37dd686077c58fb3b666a9ddb05058c4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d5be1603c8a1fc0c0984d4ecb9e4d74b488bc79ad058f4606809c284a937368c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2970e8113c21fbbbadd88ffef710c891dbe76f63240e86f63eea5805db494c17","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ce932136f1a892a9640babd29b1eb7fcae6bf72fda91550d3c651f202c0b9fd7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1e7cc2bd060683795a7bfa0ee3610e6b896c71ad20677b65ccde4278594911f9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/edcd480853dfa06c03a0f2b555f0187fad9a71782fb1d993701951f4d91173d7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/28b34e7fe74ecf775a5b15fe1e75a22138d9c68829156c134b19d48e568f2046","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/70e339bcf38b2d79774daa135ec598f2ecd99c6ec1cd9e810bbf005da9aab64d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/989b86835519fc0354d7ff54d2b5162c639d98b642835bcf4c822188e039e9fa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4aeafe5efaa93b40d653c307e0b5615610b359866ab1d57f907bb2ddb86b5b55","label":"ThreatFox","domainType":"other"},{"url":"https://x.com/vxunderground/status/2112234562805739834","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4a8a816b4a098236f12eb1b1f1f259143509bd79e907762ebf6a99352f34e9f7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/36e8a6ec8e4a8bd397e51e55b9fc970d9a3b768fdd66e6b89913492ccbc6023e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d3b6ed3442f8195b3d33b5293abdc5cce173bf2528f947634773464ae931cc70","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/87d29dca3253ac908990ffab6e9a177209394f6cbaf45b1817433452e2b2d97a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/88ce6edaaadd692355c7a9136ec2abbf628d7298348ea899044ac6e1ddce849b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0e20f67fdad9148a186f0fa99cefb448bccdce7220484f173e05add736fa3815","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b8b361af2f4795689feedb9aef172bd5d0288642354fa1aed9c0624b94fb2d3b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e296e230bdda3e0b2d190f99f7005bbaa1433a0519d8dba43df5c1f252b9040c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/310c1b73b9c35ece8bdae14dcce18fab947e52a4c21fc12b4642c1ffd3db790c","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/f0a60a57d3c07eb3b0db2218b3d67363c255ba75f418b111b72ac0f83c29f72d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/5cb67ed0bad9f06e7ef81be6d83a445a0784c6f9a2bcc8df27922b9a626908f9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/90d519148ea37faabe97f95e529bb3de04e38b73e02722ef1b5d76b9c60df5ee","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3a3daa3f6d36529eec11b00b4ef59af89f7b602d48cfa53959ce7fccf4654b94","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/18a871305fff238ac80a26688062f430742c02c8f28f4d82a9cc5ae2f180ce6a/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/00e0bae226b9e46ce1397396995c9d01ac9441f8296bbf33c70d83c350d4e757","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/622bf6c8c4a95aa3dda63b5afc070f76660c3b8c725bacb73c99ec6e036671b7","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/0dff1166b513ae3a40724d3362dde2e5a2a94cd5266eebafec3d06e091e4d697/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3b4e7678e31e4b245db656358580539e7e5837e3f60d3e8bfd290a7667950ec4/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e73400a24824ebe3627a14cbed8383673a94684760dab43833df33341df85cc8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/4d9b98e6f17e737cbaaf056d6b720708f9b293bb77361e50b751d20382dd8176/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/9010686b5dbea311ace010c27f660d9bfb5335595fefd1f66d6a911602c53536/","label":"ThreatFox","domainType":"primary"},{"url":"https://threatcluster.io/cluster/urgent-update-required-for-vulnerable-plex-media-servers-ami-9c932b4a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e943ba59901edcc39f6a0087ab84fc9ea2a7cb551489a9abf3c83fa037866453","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c430f199f0942ea3ec8111183707e2d06be074d913aef8f48dbba6cb387bdbca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5dd04ce2236d1ddf4be2973677368781ffc61b0f48a614409aa702d66464b6db","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ea86e6c3922714e144154180abaeb26f2502b719cc3f542a99753c08d360eae3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5b41847cff7b8e0dc16bdbecb4ca54ad46e507bcda63bfc1dd7f39b0075dd33d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/25f67a594ccdc83fa49c751a865bb56259f868fa78936696c0a9bb353470479f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/23b1af0ff0d45a15c7687b57cedd8fcb5e12ffa453f9b626713fe8d47be5d8fa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2c555676092b2589b17bce425ea8406b68456011e9f21fe6d87382ac08106bf2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cf28f44cfec7384cd572f5457a2d7e4a09fd72f7a29264393961fa4493b29c19","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/47258dad12e7bbb34a8421c79e98a10f62adc6d613fa8d94c30599fffbb040f8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f3f3a682cb0f5bb3510af445540d76ecce01bafd0f562d3e27606548f72b901d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d5717a63f255b21de9051933565f900e6b831388af10a7a2f7eb43fcea26a429","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2712cf9d7213439af0cbf786945b4897cb4e5be2b002530e14cb5c34f160f990","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/edb17afb151aababd85ede0952f540b3f26d5e306062b3f16e2ee617daef0f68","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1384a37d7b21a1cc8313e9b094c8d1e0cfbec72d5bf3a73d12c2506198fa6964","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/626977f1481186fc0345d3ad0360b5dd217508385c41ad8c517152c853492d6e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/39c8844fdc6d60a34652d4fd10020a7e4eb709d756b6eb5d9742c0c187e8a14d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5a35a7d01bf531ebc10ed7caaa9c5cf54333659cb00b24098f8d0cbd1afbc419","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/08e7c04e22c51313e5095f2db39e11fcc59adf56a63481ae92d8730e2788edc7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7123e1514b939b165985560057fe3c761440a9fff9783a3b84e861fd2888d4ab/community","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ec9c2e0489358859de1577405540a384d5a2e3cb094dbe3892bfea437a3927f3","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/143.20.154.42","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/550c73c949cf8d4c807561a351aff9cd29fc337c4564c4dc9aef46c58d127aa4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0a19a893476c75cd1be3fb81836b04f23b3775272c9075298e57797a1366702e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3100dde572a2915b684c3d349a86a7c44d4f9fd9467cfbdb424a72d9380a23b4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/12c1d2fa6a15cad5a681c84fbf45a3ed8cd69a44cadb176ec1a1d79568982f18","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c32ba6a498f52f4aa831dcc0ef66da00380a5519d60c8b7eede24e8f04bdeea3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9e02e90c7ea01092752970a0708642ad236b55037d38a4b24f33190bfef8c2b0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/225f89ad501a71af48f405b6c61309a6c0f041ad8add6625e75274c536954f1f/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/6190326ce3efab6fb4f8084d58dc406dbba7301b675cb6038ea2610ff5af773d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/60bae69ef9f63f44e992ca2eb2e1c4e07915ba6f26035fb92b64f6049c5d861e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f99fd49860a8945423cb348a645e3ceafa685dac36d96f0e8e96c1ed36051e42","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/ab5b9b53b603bc5bc8abb0eb0aab014d82d20b603b40fdc69642b5b907fcea43/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/b05f89e41ee8a6613461bdd57362772258f7fd8383a5d013a7965f3fd8f08eb0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c38331101cf07b7fa2e38b4792752797e62fd16b86eb57192a06e4eae21752c2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f0924944e502148d001e043b96981c621a65f0d4ea0c68cef26355936ae48340","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8c0137506ab7d5fc2ab411acdbc8f729399027568c5fc892371e5d89edb6897d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c77e8254819e19bf277948537724fdd2fa90f45fbc81d342c688432228282b89","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2aba880c132444d0a53e56ea03bdeede3aec3272d233cb33497a1f556a52cbe5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ceec6321dc3dbf2e1515bb53602bc278afa47b472f260f9bcdd109c5ad0052d4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e0f6754b62b957cda8188934366f173aa9bb8ed2beda8f3d668f9c881835a5e8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/92e72549aac041603981b9c513f0538c32224f08e4bb16b9b948b69fd5eec902","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cb8d6fea3c15c1a5db5f7f176805703668b0d9b6587d6b9fdca56b89a581cbee","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/abaa53c0fec50c794142e7a99ce2910eb2a74e7ba5cf9d359e31dc0b0d99eb9e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d4558adc71df8b901e2091eb6e7fc9781d7f3611e18ca79ed307516746ce674e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/151c4c3cb12fb3cac7f5c5871eb44fefde1fad10b84b73a8e4c871842128ac45","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f50843c01ba9df306195220951c450a19d7e45ea4d8de1e6e236378f993dbc39","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d5af897e697a845f310b585740bb2ebf26fd218c529a205f87268bb1652fc256","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/532d6eadbb1d341b967b0a066930d112c24dbd8ee3dfe0ca1ba176e33a47de8d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/597dd4fff251b3f37645ad62ad3f55501e276f92c6e1c4ff0cc0da2a2af2be92","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c66457e25286934b41d159943f7d97f01988fd7801425d3d938823983c25223d","label":"ThreatFox","domainType":"other"},{"url":"https://threatcluster.io/cluster/governments-exploit-online-ads-for-zero-click-spyware-attack-48bf43d6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aeba6d2af47c87977b0525c6e640cb769b4bd3d866956f7dc8d0c6bab48e7495","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6fde54ea9de9309cc801d48f06af383b5820b42f89bbd8df5b60e5f827fafb5e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/218ee68ec44c3deef77ff315a1f8bbb948aa108b4b5e2baa7a9b05770927f23e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e03049253c5b68f67d575be20548a6d80d1ed344010ce3e48a85d190cc1f608d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/feb45477f2f3cfebd93f47aa68288d41b84ad309d852158ff3d78dfc72021835","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fb617d2319c498e327069f1ebbcc1c05756c894bf34ff0f879f0f8a82ffbaf1c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/69d926b0626ab14317f3c5b8c5f539c77a76158a5f050b50a0b10eadb8b164dd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/878b263c7bb60c579060b55808203dec2274ed44a6f31d024c433bdd2400ae4b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dfc3bc27541d772d2dd9926cf48eba9b78cfa78b54cae93349051172d4181c8f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c0e60b8b072782b0cad0b70604aeb587c0ca5366d15af5e0a2b62c81fd626460","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/40dc77a48faae52f4ab7e2fbac202427947ffd48fc4e3dc6ed9f9b4403dc590c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/eae1ad551a79a4c8333b098258aab12566f538efcc0c8a3166bcf2f26a0ae2c5/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/447cc1be6fdca78d738314f2d56b7981d7369247cdf8e97d548946f6f9919244/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/3b5e4e3ab4963521550e492a2c74feab9bcdec24dc3cdb38509a493e2ef33e8d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/49e5d9301ec4b2646c9d0a20a1abdf2012dbdf0b27a3703a96edcfe6d675386e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/776fd70497cb6ead54c047eaf624886de308364ff2513e9accca8bab09714824","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a4059017d7843e081add1c2618b20fd2632ebab0926e891581679b5c47e36b31","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24969acf6859e685be371b98a62477d7236d5f85eff3190bcbc55dbe5b8c60ba","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5fe8ee5236cbf00491b1e8a8d41ca59dcc5dd0fbc5ad5dd1fc4b60e98abdd7ed","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7541c80a8d88083f2489d2acfc96a41aa841f9d27d2b5c5052b087fedf16ab13","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/0119e2bc2281379155fe73917dc347f31501873867e7d8174b71c8cdbf0e5c8f/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ff9c8f57fa3ec4c935c343bc636dee3253e6b6e4dbbd0d64e7898f0c7f7c5598/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/352ffb415be0af66eef67b52b58d40b571731eae62c2082a8a1968e5fe691669","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/112ce65fde13d2d815eec63d35714388566009420b533603c47a7cbaeae26a3c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b5d4aba0fe4004e851756d0329f0c165db2c1667c7c73516e0f1537c9afd3298","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/61f8e4e3e263934a04d18e29fd5edaa0840b1a8137b649e8241e5bae013f200d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/371cd811b69df8544c9dd43df74afd3d6db210edc7b3d3c124e9bbc7d0638816","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/768fb1929679a74bba202c9b4d2325c2053df6d601469bc45e5aceba87a02427","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d24a2e1d6ece4780a6c47bc355dbe1918c20366daaafbcd68a82b501de461efe","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8dbaec42ed39b96b712389111e47c06ca1ea15389c34702df799c2b035adbfb0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/be74ad1c11fe9b7895f1d6a22d3c54ee2d254d6011891c6879876ddecc10dad9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/73292d60033195aa437bb68ed229ab91c44dcf3747f22aaa3515c8a8acccd00f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0f15e62f49dbbc90c604ee07ef8eb716d2f68435767a486631d470def6ebeb36","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ed8bc2b4ab3d52999ecd782cddc6b43fd87a07c086e1a1285ac44a70ee55603f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/002c0ba824e249fbb67b3c91a0c5d97f22bef4f90c78451e9d6ebe9f7c5a3501","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a65580c55059b46ef3300dd5223602f7bcc603f96c1642cc71d9bab2a5e62e7a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f4d558133f6ffc69d42dd5c3504938e82fe1a4ef241344f729ae22f6d200cd1e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9acdd4de139103b21098bac2dba33e1547e39821296c1b89c9d4d2eded750509","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/672a08c37c016aab06df52743931e02e9a6cfc417e5e815963feea63f82afd94","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/81e34b0ec6928234d0a24f9b1634d1e2201fe0fca38bf048229d750ba35f64ca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c9d5be0b1025dba4ef28a0196208f6cc1da154f91f1c029728ee1e41a6e7b2f7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c3e8402ef7f01179f5015db65e3f34380cd7a6269536516d0cce931f18bf808f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/816aa360229920df4a3845f72442d55dc2eabab456c3d3657ce0137320ed99b5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5386aa3280e7ffec73c281d1f0266e12f2c1c8f4fba60e42670c7531f58eab0d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e395c5343703a570d12620c81b9593ea6117d2f57c95bd8247704d9dbd256ce6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/818711b296a86b6305cc6435a754f1055ce99684916d70176f2ba24335f94faf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ab09aa9cbe92e3fe0c44393d0dc483324392ee0bcbadf28e21365cdec657a6ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2947ca3a68468ea4e90db4a519f97ce2a8336627f4687dff138ee05330e5731f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b67dcc77e44af12e5f2371f823f55e9ba606ab3ed04e640d78abbff0a5ee403a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1b96bdfd280780ae6bbd34dca2ff126b5c54bae57319e629592cf7aad36e6058","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c74a2059b01fc0f47030aaa14c724c9ebb3aab11c862eca4586c7bdf933e1c1e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7c9e8862ec166c1809583d31b69bcf2eefd24d824120470e68840154cb39a35b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/71be71098e176e57aad7e2b862f293dceb06f4eba36712b92d4cb34e4a306525","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e78b3c0beda77217043f0510cc35231cd0404d395f0d2e4adbfa0ff31c2c9efb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c329ef0e14c0f74937114a02f03bc8d39d7435fa62780c5b8d8c229e53f70022","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/67c63f1b2d74c447114955236bace65fe7728b388ab068c1a7eddb81f0c43b01","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d91e0a04c55c1618ba8ff660be422316d20370353b087f326a49406718b52a56","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b849d42ab6a6ef7945aba2643ca089a02a063d9fc42819b1267ab6f675ccceba","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fa15c35f814d821bd5214f34f31edf6f20ed25f4f2d98ccd568ea21d6d4159cf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/85fce9826974549c2dd4c92a3207cf2543e10676ad2dfad7c8ea429f616cdf21","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fe134bfb3a11c51588a863598ee0ee7f45089a84e3cc2fcbf1c60406321fef40","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0b00cbaf9c0107cdf47931ae31e287ae195c35b2a32f64137e206dabc58f951a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/30e0a140a80d7788c2e3c8aa3dae112d3d8673d4481da474c7040539fe3e8d72","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7c95f72a14122c5a5bbcffdf834b7ac7540300673807da22fad705927ebc8a2c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4df43116580b163364e74f71f7f1af5c748db1b43673b6080864dd0c50f9a668","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9002363c2859f270447a5abc5779c7c8d0fe4add82ae797b0d21a45f0bdb5b0f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aca1357d5f36403c05b8a0b7336f8cfe9086583896d2b4bcfce0398c35cfb3e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e31f35925816d4f3ace5ca91b7654fb959a33c382348d5453837fe27af565d8f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1268c78e78f9ce9fcf2ad5e4f23f95978ef0c49574fc7e139f70c0fae8fe141d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e46974167d71bca0f474ba1e5b6ca7efc7302e1d013833771703a3c584ffed5c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b3579bb6b3b4426673843cc9b4204bcef0312d168e6026ecbb4195345f642013","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/35c51e94327280ce3f6b3d6814d27f8024fa332309e440ed30adcf70da067152","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/80c3b857f6d288af10a3dd1b1a6ee684b8d4efcd6cc3ae53099934f32ced1682","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a11d8f216eb7252ff61b869b1f1614437f869def108488d3fd877ed868f194be","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a79306010cf95e6ec8cfd38af9909b156a317684fe7047e900cfac596e9388b2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0d8106b1f4c5c44ecb1a77ed5efd010f33603081e3b5f37c05340e231906f18e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a38da72059c0f2dc66faedbb81a905c281c7d5fc1650068bf42a7c82b7e62de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2b66b4b8780569cd63159360fbc53761d6ba15c7635c977976d55c77d1d93079","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c8a703a6d611594d8c89c1ad8020ea7814d2016cbf61123cf2059bcc0af089d0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/23eb2f56e3aec4210edf15f1db42195ed49999925a7415d020a4c138f6ad5b87","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9d193c9369fb642c33d327c0b5a1e6a6537cfb9bcc7a02cfee953f559492fa67","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4e31128a2967d003c7cbd76c33e56ca7c305071b37b1f7660ef5c50a78bfb9dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4acf5e1fc4f248c3205bcd7251b07b2d5b4259ee96082539e7cef9a91f722c1a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6a08a6ee76cb6c6ac7e94218149934368722254420c4a9fa3f030dba27df5c2a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e96bd0ddff5eec801a6dc86dcdb1cb59b7b6f2580c0965f650e4eba4b801b360","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/164a293f4244b26f7d3c554ce57393a056ec38d2ab87dba3636cb19e64672bec","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fd9d2b8152519ea622718ad8fb2384c3cc41654577cdda443ef35f52ee62c960","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/69f655acf418ef0d7de75d4bff9687dbc010130ef2aef94a998a923b92c74adb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6bcd1170bf28860c83f23e2cf3eb26ac15b68b849759c34d5f2f1743cbc8ed9b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e9e45d5ddd2ccd0d138a06015e6b5745f20ec15af41359c679f5b988add41187","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/42abf78ee991b05de5ad78dace7dbc6d2a7a86fc08864cb318ed0aa61304bb17/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bcc550bae28d4a80bcf9c60ea576c8f2dec0cd42cb7f733b74fa0e4f975141c9/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3e67253f6bbe3aada4bd2480b84225c2356dcdb73942d7541ec9a4dbdb661961/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/5417914f3028ee7f349add35c5c3faa5b243995cfb2100a7e03d7c2a910e06f5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/84bff22441b874e62073564787871e2bcd14966bc3a032b6e56dbff34af57b6b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/89a25311145ada1664428064bc5b4ae16ec3e322b1399f3d4e753de8aba3ea06","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/159cfe6981c827b9e92bc6b31f784e1fe91a823bb6c7002d0b9bea80f7353714","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9b27f86b298180c99c4c559d5888bb70abf1075ba25729c1036b82939347cd38","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a6c2eef3bbdd41158818049082d0c5f88882d2fc1df3a4239dcf49698996cc6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/21b282512597e9121548cd0bed1375c674cf15082a98592f6ee97334842b346a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/35e354dda1bc49446eda9c1f9e9b807ddccbd6aa71cedaf600fdd9c221de10b5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ff49f74421a908b1ff2a4537d8607f71e68359eb7d4c4c2c96562f79137217ac","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/191371792deef7b6cfd2bc96cb95545a772b152734609dad21912de4749b0a33","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0cb352b4b0aa7039af5ad26fb9cdf491ee852ce34bdaecd1dc84f2173846355b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/domain/maximalmaxing.com","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1b402fdf68777db3b1a3f185dc1c1d410f3683459fe0f0aabb4154d830e19c20","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4d05b7ecd6db6ed76e6e5597f4e8a3f36ac3b55dd16874977b4b0db365291e6c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0c6a3ddee8bfbc0b7aa8107d93d449af7622f8ebce973b695fe1b94a2d459184","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/098f270041bdcb7b0b69a48fc8e026ea53e757525a699adf2a86c79a4fcc4655","label":"ThreatFox","domainType":"other"},{"url":"https://threatcluster.io/cluster/silent-lynx-targets-cis-governments-via-winrar-exploit-c567f561","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/bb518757a09ffe9c92755bf86d86d589204ece9869918c7497c8739825bcc914/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/cd0db04913047500d062f676d4099aced7ef039c7e12cebaddff6aac41def3ea/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fb799fbe2729fa88358d32375c15aa41b2de62e981655e60d4f53efb4e4fee73/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/404e448f179f662439bd08b2abbcddcaaf0034d11d786cc878cce6f9ef57b570/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/1ced32b2b64614f3110efb4712fb65bb06a00518abc28fa261153c15fdd75003/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/5d025ebb4893f8ecf8d0af727d7fe2fd2c98adf0142f695ab859ca2606f3a195/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/07a491805b23d8ebf039f56c43107261a6d3a2014ae39ec513dfb4415220ca73/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/adf75ee4f08c2f5b2dda8573061b8678c198cb3aacbf7a1d1ca3482c4cd74492/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/315e87a0b74ad49053d8bfbb1728194a09f6fce0eed1ea4c29e82ca83094eb7d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/7f14767fdb38ced9ddc50b55d0d9d23d48aeac103e68c6c9c34c70fe6da18202/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3f02b386e3e5048ba3ea0ca195362bddbac7cee3c466292df256a917b83062d0/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/e1cc2db2413b52d2eb32452d55d72ad52b2c1c4fb12ab57478a51a70344e3043/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/8dcf87fa85ae6f9ddf83cd6cf9754d8ddc4f5eb3a2be4f47505b474a934666fc/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/750bfe4f7e55736d9c0489d0462db13375c034f7cdb8e33f1cea6363a014e3df/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d82620df6807e1d65461d7a6b3a2e58aafda51b3c50c41ed1c84e8de9111c29e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/bf9f3967885b5de87f18154601cd9a68125a21c806717d0329d2a21ed73ff485/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/71058edd6a2d93d0992a4ce10736a99070e28345dc14c66d7383ea9b5da9923b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/fe797609cfa79302b8bc937b2cf996510fcee26146c54b59614daef3ed59aeef/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/de8aa6662b900225eed2e0727924a62b0b02171129c009e03d23068c7d828c16/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/c84ec5f635645672d1d5dd6a0c43aca1e11fa6aa0903396a14af0a21a472437c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/001bdee1b3ea49c4cf6ae5e117e2093d3d0119ba0d4688b76bf70e1497882692/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/190d1a5cc7289a6665339693cad778a8ae62525b612b5ce396eb3e40b7fedc1d","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/6c118d4bd1a56f56756b78134474c2a5becd3f138803d3297155691a427f6524/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/510c4b3b85201eada32ff69b46e605f384ba5ff4bbcfb5399e42b31a7de37f63/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/813bb6f2bc378364b4a0ed1405fe6ccd34a1510c4c94fe98f5908e6514999c1a/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/aa2fe64a8b365f79ba99c5cae660602063d6b555b3dd2e40d05f5293ca2c2a96/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/f2c7af231a3dc1a9291a2421d2b67e3c6ed829073fdcbd7aeec3c33a933d2f6e/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/d64921058e03078b75565d5aeea126e75698f39be3c6387d17c5d9fa8536d0ac/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/e6490a700b965a6dcf264eb1e8291217d9e52f167470d70bc24806697fabeeaa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4d0750c28f12107bc0e795b52895e27bede181fd42ac61ab634049e029950a78","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c55acd844b65a035da6a617931c6e27876d80193e1f2e449179480715c54af8d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c566ff69df0f4e054dfb1c7339b66edb4ea24fba96a4d84f03e8d8f333364df6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b5b2baef7c88e06f741c677d117bcef5b97ed48c2367c7995710e2778106a753","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c548947ab99bcf73a57d4872479d8cab3a1014f4e64106524e75cfda6ad19488","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bca72b4fbce423150db21ae8af95afec607fa84445fe664dc40d8564465e1e5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/324de8b19e5be5f6e86b5b0d594f9209ffde06f55e79997cb7260183fc6e3367","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/00688ae85b8041d81832b0f7f0552b7bb2c84b46ac72c1e6bcc5ff71ecefe2ec","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/796fd2f47ba19b912e7923cf2cf8225869a29459b330dad294ff54a923337761","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f401de4eed7ab6fabe85593ef82c02183353945def29db02f4be47eadb7a2879","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5be067bb27c2387242d019b646823fd30593ca8c12319fee316fd105aaf0560f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/21fd4621502f4fb9240b76333ed40f6097f1a4a7a9359dcc20fe198f49eee5f8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1c40ac1b4c9a79ea6077b440c3b7c176bc7e34535b29ccdff8171d0209df359f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/57472f87eb20bf1a2e3b4dcba5d37d38f87f1769073e311b4095552a6f0c6470","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e8453cdb2e9b6e5f4777bbebec65282d5cd5399496dfce268d2adfb2d1e615ba","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6461311bcc3d675ebfdae2edc2044612fe993d245503a523ac96dd0390139685","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/da57728231344d24de415d0edd2e34b45548822813e9407c53bad697263603ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5e4af631dbaf78d4ec26d83923b281a8877b9b5ced30fe79f34bb62ded7511f4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/03ad802733201bfd34994486492ce660be05149498d6f4fb4cb86f87d889ca91","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a038553e09d4b70e44f22908000d628445bf5b749b127a3e59ef0f8e3262a7cd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/29db561e83c9f2d88fab3b27f1c156a0c95481bb3c17fe0a357878ae599f8523","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0000c91778c1bee12bd082b4b741623f47c87c7f698d8e04e388f00f492f22dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7063eb317ae6f0af6ffc158544d8e230e9e99e561995a1a82a6475f893b26e17","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4c91c3452f6f2f088f4bef66f31aae78dbd71ff088f2147b25e2b4a25bda3204","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f6786557765875ccaeb53419708587920fa3049f8c0549b38805d147ba00025c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/77e7716769278c3b39fd756621328e35d19854f088a591a67cf0af4cb463bf26","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e6b9564cb4d675439cf08d0e16f997e7ccaed8f9b2021170ce8f1354dcada775","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bbb24447fa3a8463e09064b74ec6861c2d53dc604625f72fbd3a708e5ba238b0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/41421c91f617e37255e11c622c70198d3bdfc5ea1e6b9363861685131bed6b16","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e80abd2203d6ccfd773b071dff6e509842e24e91b550cbc2ce7ddcf79e051d72","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c1f4e8d18a63abe52660381fe4e00228b363bc054c93a3cc32904731172a3cb3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2613af9b3a947f733f6c12be766e9794448106aa3b4549314134c557c7aade72","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fc223e5e1386757c7fd06b94630ff2a2cfa1adcd8803ee64aaf28bb5b87a593a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ae46a1502212fff4ffb54221c8f98959981b5a2f2308b1a6ad9e5dd1b224fbc4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c8264a69c08a370932df0e805052a5271c366cb39b3de80f2ee721e4d0ce94e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/07b0271ae96fa7ba9fdae9db3d6a515fcdcb0379ce0f8316b0f837e82c2ed0af","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/151b86dd6de5829d11a58e3b8d343f72825e4a49a6ae601ab48e138844d414a6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4a09d3fdb1e3cd30f07f4942f5733dbc11ade71b36b41fecf3a5792b4098d9f9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/de8ff8c9634a91032d66fc10056f11aadf0350d4f6653447476a5535f09c8997","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ba902ec4c0c4aa948c6e64cf3a750472f7db8d21ffe89a841a80622a4fb9744c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3b65af2a918dee97fcda1c67ad5fd3ff4358ca0a86d06edb09b1971fd6d62ba6","label":"ThreatFox","domainType":"other"},{"url":"https://blog.efespain.com/en/chapter-32/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/66560b1d6fbeaeda88cd9b8cb60c6a5f5a0566671cab18ce4e9ea76ea01c6919","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8012bebbae6ce207e8eb80ec1fbedc2e3671febb8076c4d169ea7697c38ce48a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/174346a59ee8838aa96f197cc32f387301f6184dcb8c1a68f9e516983e53387d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c944cca192412a63599b52564a6a7b71cd70360786ed81d1fb6e750a9c3b8eed","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24906c1f9e68e5cfd165a59b92e00ea913a6742ac7133828fdffcb6fbf653407","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7e449df26b3b6751724b79c56211dbf6364bed247b4c3729eabe17890d2f5301","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/005eb07d1867258965d547979e7dd0b17b38b7525f2b16dccfaed606c19543aa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/22a90f21aa084f4cee778b2612365f9ddc28dc8f5f0f5872830cf80a7f10f50f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a5dd74c068eeec19470d9f62256e1830f5715c56923aa0280eb54cadb137285d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/954f32e093370efa4da1d783c8b594243f95e7ac7bfc2ccebe0c667b8c55f7de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9ab2244fd7dd63b18c98ec9c5e7121a4e2be7d97c373d9c568109bc4c7e52676","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/909bf43fe81c178e2a75d914790ba62c09744c47d99054b1c0e717ae61a4d00b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2ebee7fc1dd934ad42bd9d67ac013778953241cd3c8d67faf01c45e0bd125f15","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7d726eba93c51f7156b031ce1c80a6d5bbe9338689da508c2ecce72692264387","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5b015deebcfd8dd242d88ea20354b7907284cb2bb004e463fb18feb36d5d546f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6f5de2a227a53bbed2d2b5eb1358623bcf2516a469f5fd87a32cc03a0cd02a0c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cb8f15a422c7042992fa0a8ef2477fb3526bee7d52d6ca5f4a3917d46e01373b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d62461075ab948cc267d013f737b320a4367f2819024ed7ecdd52d7450b1ec83","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/efc0f30e9b1c8e4b1479006ecdcc95d5d4fa0627af8b294a6babe57da17b58d3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8f4e0b918ba5b5b8769e08f04e4aa366acc0159b3a1179b321d776f49006c940","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/66163a1a120bab4c0578cb1e44ae3aca6a70b276f19e6934d766f96c80451dc6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/104c36235c59c5519c5db3ad607ec89128b1ddf27587ac0522f39b7137919915","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f7154cf7168bdde487a9e4d4e5f1655a2f1735757d7196d3d657798dd8db36a5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9b16036e4a700f0a56aa83df448a53536a1d59a34245b49ed8cb64607f7f478e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/70fff5511412a20f81cb5dd530212422dc15caf60185d77309d5f87c35df36fb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/543d82372244e6ab79da55863f0b322457dc1e461f4833f073d0501236c143ec","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f9c566d92202f0139b7a55c59f57c7a7de402d436ca18e64c8be180f51734781","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/014696bc15b640ca3b480fd0ce1283c6f99687c9d3b45af18666de5e303e4075","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fe1363f77be9a4e425487917d4b37bd0e2a31177f223520769b4922374a26f0d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/86faae18773a4bc50538786f1926391a5d5faacdf4db04e52e0a76de8461ace1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9f6a50eeb9f6b6aa918fef32639e75e4bdcf47eb7c226ec26f6075376669c6a1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d86c2497a43fceeb5841c6b84cc5611ece018529e93312d8814c3b0ba3e64ba3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/34a014f288c4f2e8f2d01d58cd84c813253d9b4f2fc4449adcb3225822303792","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0f48c6ae39ccba9c337f1b16482b946330181c58fa66bece7e89ea9ecfb0a454","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/23460d9b06333ded0de5e8dd0777de591c80905d7c99c96ae485c02f8f8836d5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d62e373338fd3c2cdde6e73fd6213205f6f5f8da48a288b54d42a001bfbf74cf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dc53f410a3f2483a3448066046dd955787c7a59473fa997803161525d77cf5db","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/92052044606935476c23d5b24733838019e916d3bec16eb9e0d22eae2b8839af","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/808e0853745cce580fb9871491f9a396e2fc9782186fa1f3713e00e6397c91b2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/98fcee090ff821f5c24a956b142b85487ea63e77e63ee3763357bc4c5b588ce0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d18a59ac6cfadd3ae1e9994ff649fae5cf43aca1cfc797ed5499dccbcb6d36f2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9d47fcf063bba75a390e48f2127da2ad8e650902cbbf980693f882c0abeaa7c8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9d44b9cb6d05e0644311ec64bbd50d414af03d114663f715e5a9cc4405c2fb98","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/104a6e4b1da8f7b42bdaf887b82f2c12348c6b1ffe52d1de2d964b6329492ad7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e886787dbab479ac0da1774555a38c6f4bc98a3b58a4f38682dd741385aada13","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/28b2271555f8e7aca65d2092a7fcf2e7ece16e064e45230bc224435d9cefbb41","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/399e96af8e78a175a3e35b018cd8b2e1c7402f72a1fa9889461c1ee4dcc3dc6a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0babc2a7e4b250f66c0760dd4736930fb9d4e611570a85e983ffe724195856e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5b0e00029c234ac5e423da030c4aa2280e19b82da895e4abd7cef01841257d29","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/01d6c151f944b25d17f351dae3be8dfb3f3d89685838646704f1eb55bd4327a6","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/463f56104d5b9459918a39fd23d28937c1c7a1f88d8c3b6e48d6755fc0bbb7c7/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/d2d9832b98d5ce6f17b6f03faffe8976858e531f2cd82c0ed8d463f68a7bafb6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8b9985afb591219a78f1d652d53593316f8ebeb91db155a3a55ca594bbda26e1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/73f9efe6d64536122be91ecda713425a0112e6aaf35fa5d80ced7ac9510b9de4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7daff06433984f594d4cb5efda68bd08b5cb07c3542ddf72182ca18ed205b0c0","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3bf9ac9cb26ecffd2ab26bb14c81c110b53fe31c196cc774291ad4af804023c3/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/26bdb60a09509a4747cf622cee7073bdc639f849169232294d992ebd2f38de21","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/5b3c6ec6e558bf2e4dcff9b8f810fc5522cb9ab6271522c2ce8b0f140151ba8b/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/51ad0fe8782d9756f1fc647bfd19e649b1b3e55e8b641a295062c935c1939bd8/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/ecf0f6b181632fb335c800bcc77cccc5584bc15b5ac594dc68019f05081c3d5d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/322a9bdadc796f2b2a7459b949ff367ed3258e9a8eefb1af161b557418ce845d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/498ba9404e73593b7f001d93b4bc2793874e453735fa2faa9922502ed2cbf0e1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8d90fb76ca3f4c9e98ad5d62535da670da70e204f663d406bca95648c97f9db3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6e1feb77724a6f6ad4f39fc144df7d1329f142cacb7dcddaaa4dacc080f56f03","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/8360a40c7eb801b653b9f2180c9b3dc49fb9c6ed139f98e2491aa031f69052a8/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/a89b00ed2d49121d254b7fc32bef6310dbce1917c16c8712f222833280a59a6f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/94ab1d22e7ccb350d1c387b968bfa944a1dd838cce94981086ddcea5bf263d01","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e5b790c3a237edc2c55f01a7c648d0eaf8e969a1a9223aff605a90a1d42900b7/","label":"ThreatFox","domainType":"primary"},{"url":"https://urlhaus.abuse.ch/url/3948114/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/5861d36ffa3c3deea7ab3b6a1faf4ee0af5dde2ae9fe491bdbb6b34c4125b7bc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1bf4dc1d2448f385e9a835dacc54829c7684e0cde63cd3f1e730d5bccb8c8870","label":"ThreatFox","domainType":"other"},{"url":"https://www.joesandbox.com/analysis/1844466/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c46f49ceb9be60df6d19cb3315c070ae3aace0e8f2fd5b0e8a5dc702239c853e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/33aca4f929173c295cf0123ec5e1def8f933eab58cedb531f6c47824d8ce71f1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/58d6377013e84355c3e061886b126a73727aa06cef840a51d82c85408b33fc41","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/fc2339538b89590367cbbef2fbd3534a6ba5574d239e28a7099bfdc6c35a25df/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/8be667bf64b28ca87943eec3e5c7042efd509a0a2212b3490869008cc183c39d","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/d5a8157be3b6069a336087b0611e266ddfcd062d5c2674bc8f16d754ea017169/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/a16051a12512942c311bbaa96fb31bbe1fe56568ef879d238395d498cdbd2f2d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3874acb3e5c6f472da7df4ed3dd354c882ada48dd7838ec6c54ef2628d204389/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/49902b8647bd496b3dd9537bcab438ce9aa31a36faf0b51efab712e09b70d56c/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/0c4899656aa98daa195ecd372fe4bdeaaa4bec7a59212de2dba415a8b4ea310d/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/6546bdb224efc722030e60a0eefba1b327094081218bcd6a597f581ab326643d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/9346df55daa34090ef9ed71f309caf34b63d97a084152305839eba6ddaf52bf5","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/a1c9f2ad378b80cece5b79f6d7f50bf66eac217d233e69101ab53d80bfde75a6/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/3554c1ed46319cfde2c378f3a81a63476e81a763d7f03815f2af89bc5d34ac64","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4fc6feaf864e0990829d6384a41d046094b3609bf34563ee6aac761cc5eafe52","label":"ThreatFox","domainType":"other"},{"url":"https://www.joesandbox.com/analysis/1844466","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a9e85e9d0ad8a6d1e30df2bae6cde7d2ea19db1408ba0c5995314eb6e41a6e5f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/362bd80c120ce69dcccd9ccf04090c4397a206ddadf5dcd7bd68244e3611a262","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7fd335829658c291885e8e484c4c12027136907fca5005dfac2f431a5ffca0b2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fab07ee3a34dc2af9d62b12e5d47d117d2b702f331a52120954ae3252107b7bd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f71320a75d89ec47f98d6000d21553a68254f06cf7d34206992105ae70ff29b9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f49471484b15c37aa405fca5f95d448afb8d3511bd127f7cd408b6af4a0c6656","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/ee0f75420fd4ba24a229ef92ef80212fa54e06fbfa48ae3e8991bc94155e8130","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/56a180bd6a043981a85f357ad989579cc5028139c73d6b698b282f4906061655","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e86413635d7a0b95a0ae99d8582d6cabe2dd6aa36e3b7b2d47cce966f5ba570b","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/cefb465886bc813ac91e9ad5b1835eefe9828f251b58eb0da012ee4022ff6d98","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c217cc02dd329a1c71c332f04cd0143298bfbec5ae9a1e4b0c476816a65d65b1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1c2c786fd7328d872035669f97e55e9f11e0235d83cbbec352f1c333cf10466f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/62e7f379e176bc5044d865d89a78bbec25b200fe877b0954bd3ac26ae89d8047","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/764cf3f6bd0b4a6b74bf015d1d5ce988be631b9767dc57a8fba095c64a8bc37c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b1226243ff5d2a5f6e69dabcbe03782972bcb4b13367d9d18bc9c53e6a68d1ef","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/51110d845c7e55a01ca8efc7fdc302358de14a435178041b5957c40e7c605438","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/a44be1d5c4c4f4dd4a576708c78b955005a51c4f78fe9df8bf173b7fc5fa18ca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/65643bccd84d81a1abcba8b7775a4cdff4ea05af1b7fd25c89a142858140afe9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/faa647c0e0ac200a26e41779a31473d4de6a2ad855bca618709afe4d411ac773","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e93de53f1acc47bbf70f77e5bae5c6f7af2adc5f3ddc750127c4aeea64fc4b39","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/66e39783549a168d618619adc595c11af81ed2765a4e4f8aa14ae61dace613e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5141d009f414a3c9cfbda07d9c28be32829fffc001fb17bb9fb4c8d4b5fa150b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3b961fed369ddcc9de285bd2c8ae274260b0af0c8f32083d614ce80b8b26d3ee","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1771355f1a58be5a59a0c4864fc49f10f8facb28e765eb5e6708ab6d96a337f3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a92704ef6041c32eac9cb989024588b18c0c2141d0cb39120f84be4685c5e565","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8b3e70062ba4a39eaf7b56b49b5d3a9a29ee01c3a9635a17434c47e39af62228","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/19b6e55f371758d913ff21780f21680752e81f170a482a9124990305765a520d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6d0e9b099c6fab4f8fafcf83b380df6b817df0a06fd041acd64d37a8f2cc909b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3cd3cac10596820b929eda2e13a110c9734adfefab86872ee5573f4bcea787e0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/530a0fcceb59a79c9780e89d7a0605fc0592bb6caee1248de6cda112036d684a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c218c7836b22979e9889d464dc8a729ad407aa0f0ecb1e306305ed98d91b0e31","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6e4e0b1a8238f55f313bf64bbc162a51d971e93811136a6fa402b7128278ea63","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f9b55b2953762b0e118b1bec799d0bddc9cfe49f170da2428b4e6ef5ae31b1ce","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0a6e8e9e9228ec2120792daab607902cb5071bba0faaee8626ab64f972792088","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a7d7f9830eed676a490689cefe2c4d67376fab263e3ce80383e97e052d74bea","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7b8217516a94208e67743c0692628d03942cf700a4c65629eb9cf1cf1ad32a7e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2e4d616dcc7f0ea352d5eb45d301314e23a3cc8416dbde526aa3ad9f4523554c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4bb96aa2be066fc800d624497479a135f8c3ea1fede0aabcc6f3ab9445b6c7e4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0ecf1106c3f148601a5bb7c81fbcf49192a64201ee41e6b6a5a9ae130a07b2d1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/45fdeae9f2e04f037912eadd4716326268e666f27fcbcecad099bfb6e6a18001","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/40b46faa65a1757b46b426ed86e612ec293d5e36b6fee7e701d240a52c9ce990","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/db5516564090e965e2eafee0a9dff3b71c7ef3a46aa9969e72305814886927a6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5040ff62259cf8740de327d5980b20de915bcbdf6252bc7bfa1e2b662a6a2003","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b86c9489a4936115c59924d359f5d2cc376605460270c15032037929ac4f0a13","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9324269741c054dcea939f6ec560651b572ded4dd014a0eac753d4ccc49bfd59","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/27d0b4fd73264be99950d3ce1e2473f2761451b3f437a9f731ade5ec0ceb1d15","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a1992528ac616877af05934903af2f4afa145f38f9398d48ce941f1a84fbafd5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/926999f8a5281e22179dea84c71b2ac108be185a6d954c573786308e457df8c2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c3b8375f092798ac851bfacdb94310ccabfebcbe106f6e7324764a0e4fd4ea57","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bcc530e31cc46fb9fc0acabd938d2c848c8de69c0e37d6b7d9263cfd4a18977","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a3358d45d9b172ccb27fd5b1ec076347e3226025e20ded26c319c5804171be51","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3f8f34747f212b978db927ca45365ab2a416b8149ff93ba625436ece55f92ac2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/faf572c1c989ca17101d5003bceb8b4796e709b93bf014f642b2a2c4b7b77fb4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a208b24088153fa3ae18314706dabcf2a87bf9fc3beb1f365e1e12e4e456cfdf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a8445594db53755f9e9cd8aff30875811088958ef3fe99865708944455f3580e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/185a948ef2cb1a0338dbcd9e8fdd268bd5e906cb23ea3af4c9721b2410987d7f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/11767aae97c4226fdbf49fdcb9bb9c1e66b6e0c8454e939cfad5aad7a1591daa","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a12b6a5a9895d3d92cf3481abc09751abe3da73fa02c250ff458748eaca13c7d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/58bfc66913b3b99705e2f39d6a23778414c940cb2a7503ce8506fc200589a077","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/846b867f59c0dbc7cb2eee1844de6b8313c10ccaa68d4313e99e8cea306379a0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/260f88bfc0e6e61ccb401cd131a43014461151436efdec2550e9f829510ad411","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/5246a714a240a04f968611b42a5021aadd8024313f9dba328b832f7d04cec2e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/62e9c335a427a6e47d3a207e61dc4c52c57c13de82cd514f691f3f891ec225ef","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3045f39842e81bbb3c18e7f3dfb9872928a1ca58bef21800bbb5aa74b75216d8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aa2a4e66e81e492392b4e1c78fff9635fa63fc2d4d7f4c6b6438367ce4fd9aa1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/714d4d3235dd25315c3396e13329342b14fe33ecffd4628d9b5c1481daf72016","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/e42b8c35db5ab7169327b9185c3e05db4a156e8922b985da61bcbd6223df8aea/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/3ae3d11cd46aceee81783fb1204c4ae43459e670a8071f76c8a9a5851287a965/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/329607bf10b6d19006009a561e8e09cc450d0287e84e13980e48b76c94d4ac90","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/1e8ed19e771e7a9378daf3b3652802143345db8ea4196e560e54f28176ef958a/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/f2a60b9207d24dc6679c9ec78d63cd3bb4519da12002189a1a517834c6bddc19","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1f5c9db09902fc4ed8cb39808b96aa7633c4f158d713709bf971af323543fb1e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/961a6bf3f05911b8b73d639de7178baa23cc8d9ce54de4a6604a977bb1532b6f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/574a6b2e66744dcd85d691de6797c4544c34d48e361b4fb9579b3cc292fe7085","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6ee8d6f5c3f2a582f738d047f16608f3ad4dee277f2580da6028afe370b3aa40","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/606ab3b0ad1b3dc635b001104d5bf7a96d77ed39e2df448fbd74017cf0cf823b","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bb3718a591589b740b96973e8cd11e5b17519f0ceaf8f126d03da9ed680c296e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/688804b19001b11dd2f3c1bdeca399b897ed8015c3024e0f2586ed4f7a125ee1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3a9175dc1911935956c94b3dc4ca13b0ba4a0f2881a57bb6d772e2d88e75b888","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/42.227.203.38:54878","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cfa34537cd8bb9849b9368219e5841c705cfd59e93326993f7c9827d34c8b43d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a08fa2bb57a0c30c7c141ff36e121c78307098fbf91f3efa53c7d98292c57af0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/09e573b4c53768d60802651a0fe5b81a70d53660b0c2a9d54ce076fe02340a26","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/52c2e8b1226fd66a1e86c9ca7ebfea784137a8d2dbacc4037e0d4d052e900c2e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cc7c3eafec8df3b8de10dbeb577ad135f5a0cee61e1e0241e1a596aea0eddef1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a754facc0f267b7a76dbd15468a41847be8561636c8cb1652bcc01c5368ea63f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6df2777fa6434ab6848a387e85590b6638d1b7e1296419d83733da573ce57784","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4486c71a06a57cc3f60ab7bb6e0e761d06ba269db9a0ce122dbcc046136d6206","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/628e06c690296367d11a69d357686e39799bc2130937c4b40bc4b3532c52f8c6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2854b365ec2dc32311bdbd9eadcf6d0e1d448e61f7ccccc3dbbd25d1abc8246a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/01a0cae7eea42524f2f5e1a72aab2762c6ebcce4c3ab0b0f358406604ad606ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fa37b294832e59b0ce184a8f6685aa7aa99a1628723d269e4d6c801aa17dc472","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bbd80fedf15cf795fb2bef1db546323f341a00afbe2902bf95b7672a8a4dd574","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ac5d2f1bb078fed0e6712fc303d4b3a1f90c2f757f4a3520c9ab5a4bc9a49e78","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c2eeb788d76a220e9741fb1608987d0909034477299d44fa55142d068bafd2dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3c722bf15f408ae9a8c5e51986642c605364851d5c7c6a70158e8a71ce65470d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1728e932ee72f007f031c0a6647c1c109aa86e87e810bad5a90af79a875d6434","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/afb31a7b55a98167a75b7b8198bf4be5c98a14bc8bf23b4b8cc9f0020262e053","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/093740f077302c1b305938b61f18ae29f37a45b6627c027887f6b0449ab6fb88","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/24ee5f1039322c34c180ae356bc6adbd6a00984166df6af4a349a72c7aaa1383","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/25bad25167b4026b668e1e09fc30249c9bdd034c221b81dd7d3dab15f6cbf3d4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/369b696d3336f01c2eb63d6a2e0a148f5c71a198ca5d24007b0df18c6e7f9e4a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c36acf564688a6ab3a9b0ef93db1f3594d0f9971c971f5058bea22e750c40b57","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/40fa4235a99ab6a81cc74b6a1f3c2ab17a3a11451b05628ae11a44f361af75de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0f70e7c1e05265fb05461042efc73df55a8d1dd22993011aa1724b65e365453b","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/e6b0de2d1e40e60fe6aa94621e4bf33e567657f13b178da9744c6b04894fea86","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/703d378499158fea0648ed9bd8d45a5940607b860bb295ede21563f8feeb3b57","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d6e76cdba3b64c8733492964976faf6de9a36bc863cb65fd57865b7e4fd869a0","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/71106af9f6f6040bb69d12cac6442d9482f360d8018403936ed6a6c3e9f0ee51","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/dab539c8ab305cf62dec76b77f619e3de85af34a544c1582768882028edb3393","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/526cd1d38d1b6ba33764512ccc14929039e89efddf61ea17765e00e7c7b0c8c3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d36e3c5ddf65aeb9aa3828845d3c0efc66e11c5d536d263049858a40a4d0c129","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a4702449c7d794ccf46b92053a6b1517739415890e0147efe6aad96c683f4888","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b13de57505edea3858c69eddd66292767f12ac2296876ad075cfc9e34eca3a7c","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cbf5a4f264d778ae60e835d32df673c4ee2224c88421259a19d7cabbdd1e18a2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2e7db0451353ba2f128333ab512f388cbc172f3d2f81766c3a14c7cf153830a3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/48a562bcbc96eb4523e8615ea05e76ed59301dc3bbbf96d6536a37777eb8958e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e6ce5525512e01f9b3a6a3a659cb1ffb578c50ec63096d6cf5a75e194421b4dc","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/9eb4c83decf7f9b3f31001de6404ec6c7bc214304b372b3686e6e7118cea4dad","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/fdc7fdbc7a64f030002b16436cc2fec5694392a8da77751156a8c28039474c0f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/12d5649d59cdd8034def4a74f3db6a2dc24c80a59ca3505a71843d284332a6e9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e11db3bf8c3a66af944fdba35762148b825a704c4792008e93a80395e47c1632","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/778be86551e061288e0f3dbf1237f6b067155170f08a884bea463b8415fcb170","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/37e6cd883240a67eb5f6e88e681978563e2ea6371beb9096d362d39b1a736df4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6363fea32a30affca2ebbbcd28fe60f5f6a4122231a80b280eda6f9523be931a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d34df68e192d8d688a49ac68c6fe60e7a75f18e012e8671dadc45cc90b832377","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/57a671a61a6fbebe17b09d9baa5712d3b0af8232fd807697183c6b1fb67286a4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/09eb8bbdddc17ce5be1c176dcdac2b812414fa3691ceb5fa81e7ef6e20a20f6e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f3d8ed915b2a53a35e52bd1ec39c21deeaa831ae0a969221bb7bab492938ff60","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/153ba36354b6be51e389dc81643f6c5799c6a317ef115b0a56343042845e9ef2/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/f3b1c6f4350d34063cd7b8ab8b255cd40ae6aebf4963aff71fcb3f96c3300000","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/94fa6a971ad5f47af054b81752d471b920981b3ee4874a3823062417e7b36a9d","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/3b38f182ae0012adbda7d6f396fa9c0265d0c8f6825ee13314e74397c21259f5/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/5c5f5243923df0f7d0df186aea5e57a0afe61974d3b5661581658b041fc25985/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/732589bd83261216a5c8029882f6819f785993af19e4189e6aebcec6cd807dd9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bc3a8a1f1c7e8da9036bf834d1c73f9b813ca928341c9a2eaa290d13f3e42a4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bd057e7560e1eea69be473005de73c6c97be545d81caabb9723bcd84a66d44f2","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eb5a4df6986f8534413178add3444a5fe58af16e8f500ab122b3096eb24646de","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/35b1308baa0c0a79f8431aca3988c4389c0e0f9fa3ecd4243295cd1707f53683","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a9cd105e5cdf8b3cafb0fe9ffb886ab7becd7dbafa7c4cf0ce214d2d5e5686c8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1de24789010bcf294a1fa3c8a982d924ba5d212ada16a30dc8e16532293886c9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/21c98c84b8be10a6907353d9a3f508219eeaab9359fe008da967efee27a36735","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/81c6588ff7720335ac09719e6230d1a8b885b8d10245c1601613352d861c0e44","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/421eca40073d7c1e542825a8bdaeabf252d8499cb69b9f5591427bf9ee619865","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/cfe24f9b882b88b7205f6f380872fa0a8496a37426fa048da1187326525e5a01","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/34455bc291e4769278f81010c7563c3aadac66eed2aba8156e0afd307a7a11a9","label":"ThreatFox","domainType":"other"},{"url":"https://blackfish-defended.com/research/zenith-kit/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/15d7c75f777f4ea7800122bb8e5cb6bcd3ac8d23e1eddbf1076462443cbec990","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7bf96c55c8b19514de16261a63a079e0ea0f136e0aeaba83a7da79c3ee0b965e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/09e12a9e689710a0afbbac671a047cf2056285e7555e8dcbf7496693f5651cb8","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a77493bbb1c5e2ded3aa4f8cb7e40084d80f57e5bbe10ccb05bf78ea5371eb6a","label":"ThreatFox","domainType":"other"},{"url":"https://hybrid-analysis.com/sample/499cb7ae6c385c77d3eb663394e552626621ecac74d86c8dc392f4098886927d","label":"ThreatFox","domainType":"other"},{"url":"https://honeylabs.net/lookup/176.65.139.40:80","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/7997b84c10941d97069dd9dff12fb3b6678564c4356e7f749c7179071d59ee11","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/1eb66cf083f9d36b561989a45737d12f92bb0765d286e1147431f221a27ab755","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c58e8b009dca8e25d8f6ca11af383c569063e3a94423d36881affbba920c5242","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3f6ec620fe8d14b56041aa1f133c8517e49ddc3056bbbbd384a72a9591be5e92","label":"ThreatFox","domainType":"other"},{"url":"https://blog.efespain.com/capitulo-29/","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/894ae89f56f352652cdb1f9ec23ac1c31f26ea648326bfd23c871636ff66ded7/","label":"ThreatFox","domainType":"primary"},{"url":"https://bazaar.abuse.ch/sample/db189ab138d838f20f1795768413d7e50657201c172617039425b75a4573c96a/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/b2e10cc59414674ef02ebd9822754cc366081c350825846f2e61af5b0650681d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2734b04648223dec4058fa5371cb41c75ef3d2f1f1bb6f838f50758cfdd406ca","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6ee79dabec97ffc6dbbb3ec7115b8c16977551aca5cb90ccec77a580ea2e3ac9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/49e3cc11c904d158978479ad40b785d5d79845b0fc43b09122d3d6488c1dc300","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/aeab2a46685337814afd5c7c3a1b95697de2ea63438099d6c397b83011b5001a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/63c973360d81debdfae4dbbe551f23bd1263e63da056aa0f6b0f373984112e5a","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/956b3514f38e62f398f2b62fb7f6a11199e127ed5a1517211285056e62d2e3a6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/52bde62f5577811e0dd845c072a6ecae39f18e396bfd709fe1beb7b14b545408","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/934e41b60af233c1060226a741e678072142aceb942aa796837f0f70e9e60009","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3eaa7cfb6d86231c6fd8a913254213373b438cbd2dc69972bea341c226ea8901","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/bbab66169a3718001fba30bb464bf48571bd82205b0e10c32ad1e78a92890838","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/eb4f1565c5c9c53bceeec57dcfb91384d8d53d6a696a32de774a47f59cd25dcf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b9cc60047e896f844e0fb901c51586c90107df9e83b6f5b6e300ba91ed9f8218","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/3267f01be506f81885881ac048702223ddfca3e17cf5cb4257e816fa76f05477","label":"ThreatFox","domainType":"other"},{"url":"https://blueteam.cool/posts/flomo-onedrive-sideload/","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/48915d02c38586a28005fdcaf52b06e68cb84a0151779486d4b15327757fbeee","label":"ThreatFox","domainType":"other"},{"url":"https://blog.gdatasoftware.com/2026/02/38373-pivigames-spreads-hijackloader","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8e7c55e596ac463a6c01cf9400d3766a0bca7d4cbe6d95774e93b609c8d9f5ce","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c4df64b6fd39b0caf8493ac3442caffd44c8c8770206d03fdad266490de94560","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/84511942c44419da61015b22721ab12e1ac93d857e1d9ad28065cfac74f3c8e6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d1ddc006dd617bbbde3900096129eb1544aaeeb43e6618023d7bab4c8c125a9d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/a1efcf4e1c2ee9a4a887ec9208a7f69c0bc360677db147161cad1e54520780fd","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b539c4cc58ba6c54d126e46c391a98f6619a97c859468abb4c5c299ce14d5bd8","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/634472aee22bd1319f78eb025ef2bdf0e699682138b2d1b7284104443fcc0e79/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/3bfd259546c9746ae49fbf47a478a231d0f96dc6aadc2cdfd7f24753a1c54d92","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/61018a9390bae5beab034c820856996613d9ad122271bf615e1bee2d56bc3cf6","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/6dbe1b423fc86d6e1d3ad45fb621fd4a01247fed0ed0298b4f7ade95aacb920f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/8a02d1826b114ffeeafafbe54eb816908b34970356738b8a1e5da5c7e1859bd3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/2dc1de602d1af859042d787ac993d9db89e294d2c7461c5a5af178b7322085ff","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/52b99f5623d2c35e0f45119e9ac7c183b50b421ab73d01b1333706d857921b6d","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/700f16a8510983959cc2ba47648257427940c5fd7980786a998ff59149219f6e","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/e2d91710f9846418628cb5cbf78f0798ddb274d71273d1f40ef387ca51bde1d9","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/486277d29cbefcbd321d7c7ad5d72bf1983c110206ed607c6c371af7f7741308","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/b7f158c800fa6dd6b332815cff093498e851ff07e68ae04590cbed701fa4abc5/detection","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c54dd8d6ea8ffa26a5056d7008e741c13829ec205445a0465fe7e149197c25da","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d6a853da419c64f3d81892416e5d52a4ad11b6f4e9e6ff455cee11e1f02be4e7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/c971bba6255c0a88f7fa852173e99ce3049dc6f11c44d038233db2056815e7ae","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/baff2658000b5e7f8c533a802691e87d6441e916df6486187e86fd9734a8c331","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/138ea0b71b71dd0ef5d66ddeed1e8f5eca4a562558fc68660d64a007d5690e1f","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/034aa4ebbf1d5cd13b082bc5dfe86cf4901db7dfd3ae9f0a2b1d622b4f60bc40","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/875cb2f5138ea7010e5b88aaf88610ce06aeffd65519fcf3b378c0e4bd9a8ad5","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/4614bb60faf9c9edfac1fa8c90d0c9f939a495cd47bea531142221f6919cabb1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/af3654e898bb001aa571121049508f0b1d669efb6ff853c0bc1646e05145b2bf","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ed77297087d4162a416fbc8c0be8359271c817798149402ce77c066b860d28a1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/ff87ff324833273d1862a79de68a3943a247ce98ab5534df31116d498dbb20eb","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/d077f79fc37da1fe146165bc617d74dd24f9aa71be51e7ad8f6cbcf26d2fd3e7","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f8510553bec5554f6c23a4bb13b14412adaff83a470b937b5cf92e5f29ac99b4","label":"ThreatFox","domainType":"other"},{"url":"https://bazaar.abuse.ch/sample/75aed4ff6c83d5ccd6984faefa7c0fe4bbf30c29a28a3c1f1901f33f6a5ce62d/","label":"ThreatFox","domainType":"primary"},{"url":"https://www.virustotal.com/gui/file/ccd13b2a939e83bb5f7500c6188e830d365021c4e1ffb3edebd3e538c4541bb1","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/f719a1d71332414c1621b0ceaa56485bfc80bcfb2c072d247b25daecd026aef4","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0659679711ad071bf27a29da57e315149af48020e56a56ec8909349a410559f3","label":"ThreatFox","domainType":"other"},{"url":"https://www.virustotal.com/gui/file/0d0d2757a1faddd1d44fbfcef027b0c345d6028dd72af9b305c4cb06ec8832b6","label":"ThreatFox","domainType":"other"}],"feedLabel":null},{"id":"otx-6ad632287e9fae87583d6526","source":"otx","category":"threat-intel","severity":"medium","title":"AOMEI Backupper update servers hijacked to push malware: Check your PC","description":"Between April and July 2026, attackers compromised AOMEI Technology's update and notification infrastructure to distribute malware to users of AOMEI Backupper, backup software used by over 100 million people worldwide. During three confirmed tampering windows lasting ten, six, and five minutes, atta…","indicators":{"cves":[],"ips":[],"domains":["storage-data.com","promotion.storage-data.com","aomei.storage-data.com"],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["aomei backupper","remote access backdoor","supply chain attack","upgrade-now.exe","update infrastructure compromise","software distribution hijacking","supply-chain"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:07:20.711Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad632287e9fae87583d6526","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad5b2c95417d4d1ac959070","source":"otx","category":"threat-intel","severity":"medium","title":"Plex vulnerabilities being exploited in the wild to drop a cryptominer","description":"Multiple Plex Media Server vulnerabilities announced in September 2026 are being actively exploited to deploy cryptominers and proxy software. The exploitation chains together four CVEs to achieve remote code execution on vulnerable Plex servers. A honeypot deployment captured exploitation attempts…","indicators":{"cves":["CVE-2026-96652","CVE-2026-96654","CVE-2026-96655","CVE-2026-96656"],"ips":["217.60.194.116"],"domains":[],"urls":[],"hashes":{"md5":"e1b3e738928012a07dfce8659b3ff31d","sha1":"c9bb4fc8eadaad35e50de087e3bbd5969cb2df2f","sha256":"e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9"}},"tags":["cve-2026-96656","cve-2026-96654","proxy","exploitation","myawesomeproxy","xmrig","cve-2026-96652","cve-2026-96655","remote code execution","honeypot","cryptominer","plex","residential ip","rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:03:53.643Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad5b2c95417d4d1ac959070","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad220cc0811c90b23c261eb","source":"otx","category":"threat-intel","severity":"medium","title":"QuartzLine: A working PDF viewer with a backdoor inside","description":"QuartzLine, also tracked as CLOUDHAZE by Mandiant, is malicious software disguised as a functional Windows PDF viewer that conceals a backdoor enabling attackers to execute commands and deploy additional malware. The malware has appeared as paperline.exe and fielddesk.exe, signed with a legitimate b…","indicators":{"cves":[],"ips":[],"domains":["motherotters.com","healskills.com","beatramiro.com","flawlessgradecheered.com","tabbyottercub.com","biggerworldclassstandard.com","guessgooseberries.com"],"urls":[],"hashes":{"md5":"66cd7c21dea2279463d0111b40bc1055","sha1":"af642ea85cb37a51ff317fba37daba29bbb5fa87","sha256":"d287a970294d54db5ab3ac5f7e9525c303b9aceac7117b165385c5655717333b"}},"tags":["backdoor","ironbark","quartzline","chrome stealer","pdf viewer","cloudhaze","caira","malvertising","botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:04:12.969Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad220cc0811c90b23c261eb","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad5e7f75d4f869db2238e26","source":"otx","category":"threat-intel","severity":"medium","title":"ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks","description":"A Microsoft 365 API credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was compromised and used to gain unauthorized access to customer M365 environments. The threat actor authenticated from IP address 144.172.64.128 on October 15, obtaining Microsoft Graph access tokens across hund…","indicators":{"cves":["CVE-2025-11371"],"ips":["144.172.64.99","144.172.64.128","144.172.64.60"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["m365","service principal","cloud backup","skykick","msp","connectwise"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:50:47.025Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad5e7f75d4f869db2238e26","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad2ca008bd3199ee7bb0b83","source":"otx","category":"threat-intel","severity":"medium","title":"CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability","description":"On September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution vulnerability affecting NetScaler Application Delivery Controller and NetScaler Gateway with a CVSS score of 9.8. The vulnerability enables unauthenticated attackers to execute arbitrary commands without requiri…","indicators":{"cves":["CVE-2023-3519","CVE-2026-20131","CVE-2026-20253","CVE-2026-75650","CVE-2026-88771","CVE-2026-107406"],"ips":["45.153.212.101","111.92.128.89","103.83.146.100","195.62.37.119","102.222.146.45","82.167.14.7","130.12.182.7","46.33.33.95","103.181.212.245","114.145.49.215","120.244.160.182","125.62.88.26","13.1.37.28","154.183.158.198","154.241.254.9","174.60.63.37","177.52.203.23","183.63.88.227","190.117.56.56","207.48.184.10","46.233.40.20","46.236.167.143","49.150.197.119","78.190.152.64","81.10.79.197","95.105.74.172"],"domains":[],"urls":["http://209.141.43.95/files/kw2-freebsd-x64-s11;chmod$"],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["rce vulnerability","netscaler","freebsd implant","zero-day exploitation","web shells","cve-2026-88771","zeroday","rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T01:06:08.544Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad2ca008bd3199ee7bb0b83","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad241d9f4cd3e84da0dbd3c","source":"otx","category":"threat-intel","severity":"medium","title":"YuanKong RAT: the Android remote-control service that stamps its operators' names into every build","description":"YuanKong is a multi-tenant Android remote access trojan whose dropper stores decryption keys in cleartext configuration files. The malware uses a two-key XOR scheme to unpack payloads signed with a shared certificate across all operator builds. Each build embeds operator account identifiers as hardc…","indicators":{"cves":[],"ips":["206.82.1.14"],"domains":["www.ktxapp.com","ktx123.net","www.ktx123.net"],"urls":["https://ktxapp.com"],"hashes":{"md5":"b94b2608c3b296f521000550c1267bf9","sha1":null,"sha256":"5e4d1980f76e571dd0300b9fa356818f874528fc0517d0d0e0afb7e561904764"}},"tags":["overlay-attack","android","adb-escalation","yuankong","botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:25:13.213Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad241d9f4cd3e84da0dbd3c","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad1d33960a4dd738f97701a","source":"otx","category":"threat-intel","severity":"medium","title":"An Analysis of Suo5-Based Tunneling and Pivoting Attack Techniques Through Case Studies","description":"This analysis examines exploitation of Suo5, an HTTP/HTTPS-based tunneling tool, for pivoting attacks through compromised web servers to access internal networks. Suo5 relays TCP traffic and enables SOCKS5 proxy access to internal systems, supporting multiple transmission modes and environments incl…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":"810726bb14e100a122cd8fc189eb087f","sha1":"da6918a86f2165f44539c54b22d457660101228c","sha256":"5fa12b9a16d6d5bab38b4a6d8c4cd46afbcd8f54786131c618588073ebabd1a5"}},"tags":["iis exploitation","suo5","https tunneling"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:33:13.914Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad1d33960a4dd738f97701a","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6aac13f8b67f38a3496d4d1d","source":"otx","category":"threat-intel","severity":"medium","title":"The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents","description":"A previously unknown modular multi-stage framework named MovieReaper has been discovered targeting users through compromised torrent files. Attackers compromised the public torrent repository itorrents[.]org, enabling them to distribute malicious loaders disguised as popular movies, including \"The O…","indicators":{"cves":["CVE-2026-3102"],"ips":[],"domains":["deadhub.org"],"urls":[],"hashes":{"md5":"4334bbaea8de33bf9d845e9b4e4e3bc2","sha1":"ef7a83a24ad66cd2ce560b3aa2b467a47abfe2a8","sha256":"c424abd51507f75221701a52ba57264d6c0839944fe26a7118597a455626a632"}},"tags":["solana","uac bypass","moviereaper","itorrents compromise","blockchain c2","botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-09-17T16:23:20.802Z","fetchedAt":"2026-10-20T03:00:00.647Z","references":[{"url":"https://otx.alienvault.com/pulse/6aac13f8b67f38a3496d4d1d","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad0e1520be4762ce91fe695","source":"otx","category":"threat-intel","severity":"medium","title":"Inside a PaperCut Attacker's AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ Countries","description":"Three exposed directories on infrastructure at 45.142.193[.]132 revealed an AI-orchestrated campaign targeting PaperCut NG/MF print management software. The exposed workbench contained AI-agent instructions, exploit code, operational logs, and post-exploitation tooling. Attackers exploited CVE-2026-…","indicators":{"cves":["CVE-2026-81578","CVE-2026-82078"],"ips":["45.142.193.132","45.158.196.75"],"domains":["108-security.hiv","108-system.hiv","chain-validation-results-2026-09-02.md","cve-2026-81578-82078-africa-triage.md","geoip-summary.md","pc-sec-rust.hiv","pc-sys-rust.hiv","where.md","groovy.util.eval.me","socks.shreadme.md"],"urls":[],"hashes":{"md5":"fc92dfafa7aa741c5f2b9cbcf75d1d19","sha1":"77e981d0b1b81151a6a7d0966aca1b4a1d0f3022","sha256":"12603f7a89c66717661f4695e2f0d474036e42ee1631b2070aa88d590d1b79c3"}},"tags":["pentagi framework","ai-orchestrated exploitation","cve-2026-81578","xml-rpc abuse","reverse socks5","credential harvesting","chisel persistence","active directory compromise","cve-2026-82078","papercut","phishing","rce"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:21:06.175Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad0e1520be4762ce91fe695","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad1023b92a010044f3dcbc8","source":"otx","category":"threat-intel","severity":"medium","title":"KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize","description":"KGB RAT is a Windows Remote Access Trojan actively promoted on underground forums since late 2025, marketed deceptively as a legitimate administration tool. Sold through a Malware-as-a-Service model with pricing from $150 to $800, it features credential theft, keylogging, hidden desktop takeover, ra…","indicators":{"cves":[],"ips":["2.59.134.215"],"domains":["ntdoc.m417z.com","kgbrat.org"],"urls":["https://ntdoc.m417z.com/ntsetinformationprocess"],"hashes":{"md5":"e4af0b6497b27e048aee921e252fb1d8","sha1":"d612974014b76eb8994079a9a714fa9a4e1f2773","sha256":"3d71f8b5171f2fe47d9a247a193c1b48c1aaa4d533811e208b8d94ffa5800c9e"}},"tags":["credential theft","hvnc","telegram c2","psychological harassment","bladabindi","remote access trojan","kgb rat","windows","cryptoclipper","lime-worm","maas","njrat","ransomware","botnet","infostealer"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:41:31.104Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad1023b92a010044f3dcbc8","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad188cfaac94d891e960fa6","source":"otx","category":"threat-intel","severity":"medium","title":"Variola: From ClickFix to a Modular Implant","description":"Blackpoint's Adversary Pursuit Group traced a ClickFix intrusion to a previously unclassified modular Windows implant designated Variola. The malware establishes persistent host identity through encrypted storage, maintains configuration and controller information across executions, and employs auth…","indicators":{"cves":[],"ips":[],"domains":["n.alox.one"],"urls":[],"hashes":{"md5":"5f4eb2c7557c3455fdff35e61bc56a24","sha1":"d3568d6470ce3a70ad7b32c4143bc982aa92b6c3","sha256":"fa9a4ce0e4348e99097351f89b484851ef084e1873d67f79559ed9e190e8cd35"}},"tags":["banking trojan","credential theft","variola","chromium","modular implant","github payload","browser injection","powershell","clickfix","aura stealer","botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T02:15:43.411Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad188cfaac94d891e960fa6","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad0c30399495ae02dc7664a","source":"otx","category":"threat-intel","severity":"medium","title":"Aoki: Infostealer Targets AI Coding Assistant Credentials","description":"The Aoki infostealer has evolved to target credentials from AI coding assistants including Claude, OpenAI's Codex, Cursor, Codeium and Gemini. This capability represents a recent addition, as earlier versions did not target AI-related files. The malware steals API keys, tokens and session files that…","indicators":{"cves":[],"ips":[],"domains":["neihite.cc","dobeqnesmot.cc","hjazfioe.surf"],"urls":["https://dobeqnesmot.cc/gate","https://hjazfioe.surf/gate","https://neihite.cc/gate"],"hashes":{"md5":"bcb060fa1c89e9b07334a12e7891619e","sha1":"e3af6d9e3b35e5e04feda3cde96256dd3b099624","sha256":"f779314b1a5a0b297fd4e2a5f9c1e40d387b3e7c401d42324b556a70f813840e"}},"tags":["api keys","aoki","aokigahara","cryptocurrency wallets","infostealer","ai coding assistant","credential theft","browser data","session tokens","botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:11:47.867Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad0c30399495ae02dc7664a","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6acf85338bff164de62a2759","source":"otx","category":"threat-intel","severity":"medium","title":"Hirudo: From Fake Updates to Patched Banking Apps","description":"A new Android banking remote access trojan named Hirudo has been identified, combining credential theft with live remote control. It is delivered through shopping and entertainment apps that act as droppers, installing the trojan as a separate package behind fake update prompts. The malware replaces…","indicators":{"cves":[],"ips":["134.122.153.136","134.122.153.68","134.122.153.92","43.225.157.157"],"domains":["jiekou.baojingtextile.cn","www.helloharmonyos.com"],"urls":["http://43.225.157.157:8766/request_token"],"hashes":{"md5":"3ccd2c02cf0661613816ca30032b4cdd","sha1":"3b14859a3a1219515f89ff453c7031f3dc8a95d7","sha256":"f796eb9ecf516e4f1fafcf89200d9f7d8ddd234f705e63f1bc8fc3ef583f0248"}},"tags":["device takeover","indonesia targeting","android banking trojan","app patching","hirudo","rat","fake updates","credential theft"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:35:47.216Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6acf85338bff164de62a2759","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6acf8607ba5b3757d207eb86","source":"otx","category":"threat-intel","severity":"medium","title":"Fake Calendly \"Meta Careers\" pages steal Facebook and Google logins","description":"A wave of fraudulent websites mimicking Calendly booking pages for Meta job interviews has been identified, targeting job seekers to steal credentials. Victims select interview time slots, provide personal information, and complete fake CAPTCHA verifications before being prompted to log into Faceboo…","indicators":{"cves":[],"ips":[],"domains":["joinconnect.cfd","joinconnect.works","joinhire.cfd","joinhire.info","joinquest.cfd","joinquest.info","joinquest.works","jointhetalent.cfd","jointhetalent.info","jointhetalent.works","jointheteam.cfd"],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["calendly spoofing","job scam","2fa bypass","social engineering","phishing","account takeover","meta impersonation","credential theft","ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:39:19.583Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6acf8607ba5b3757d207eb86","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad07b924dde0538386bd7d5","source":"otx","category":"threat-intel","severity":"medium","title":"How AI Agents Turned One Exposed Endpoint into a Server Takeover","description":"An investigation revealed the first confirmed incident where large language model-driven AI agents executed substantial portions of an attack. Within 24 hours, attackers exploited an exposed job-submission feature on an Apache Tomcat server running Spring Batch, requiring no authentication, zero-day…","indicators":{"cves":[],"ips":["204.194.54.240","204.194.55.189","94.177.131.113"],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["privilege escalation","ai agents","llm-driven attacks","automated attack execution","cairn orchestration","agentic ai threats","spring batch exploitation","zeroday"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:06:58.694Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad07b924dde0538386bd7d5","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6ad07dbf74c4db571f556776","source":"otx","category":"threat-intel","severity":"medium","title":"Iron Man & YamStore: Powering a Global Phishing-as-a-Service Ecosystem","description":"Resecurity identified and mapped infrastructure supporting a commercial Phishing-as-a-Service operation marketed as 'Iron Man System.' The kit is sold to criminal buyers as a self-hosted package deploying pre-built lure pages impersonating postal services, banks, government agencies, and other trust…","indicators":{"cves":[],"ips":[],"domains":["loveboy.xyz","protonmail.me","docker.aidchildren.cc","aidchildren.cc","haoeryu.top","api2.haoyutai.cc","api2.peaceman.cc","bin2.peaceman.cc","docker.loveboy.xyz","install.loveboy.xyz","ipapi2.peaceman.cc","log2.peaceloving.xyz","ossapi.haoeryu.top"],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["banking fraud","global infrastructure","chinese threat actors","phishing templates","postal impersonation","licensing backend","iron man system","phishing-as-a-service","phaas","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:16:15.616Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6ad07dbf74c4db571f556776","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6acf82f3a84bcf5248537bf9","source":"otx","category":"threat-intel","severity":"medium","title":"Case of AgentTesla Malware Distribution Disguised as a Business Proposal Email","description":"A phishing campaign has been observed distributing AgentTesla infostealer through emails masquerading as business proposal requests. Recipients are asked to review an attached product list, but the ZIP file contains an executable file instead of a document. The malicious EXE disguises itself as a ca…","indicators":{"cves":[],"ips":[],"domains":["anmarinee.it.com"],"urls":[],"hashes":{"md5":"cbcc4ba1a1485cb01a4b65fc7915e629","sha1":"98c0879ad8c1d2c85e1d667e70e37810618c5c17","sha256":"9d5ca4e40dedfcdc58612e741433e571e82151ae9cade617250727b5ad3f7a49"}},"tags":["phishing email","ftp exfiltration","social engineering","obfuscation","multi-stage loader","infostealer","credential theft","agenttesla","phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T13:26:11.771Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6acf82f3a84bcf5248537bf9","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6acf2be335dd8bbd4e27ec2e","source":"otx","category":"threat-intel","severity":"medium","title":"2026 Q3 Linux SSH Server Targeted Malware Statistics Report","description":"During Q3 2026, honeypot monitoring revealed attacks targeting poorly managed Linux SSH servers through brute force and dictionary attacks. Primary malware families included ShellBot (also known as PerlBot), a Perl-based DDoS bot with C&C infrastructure at specific IPs, and Fisieredoor, a backdoor c…","indicators":{"cves":[],"ips":["177.22.88.133","103.157.217.38"],"domains":[],"urls":[],"hashes":{"md5":"3df700b3c1d0ffab386397f4e59c5b23","sha1":"bf60c4f290690e4b6ec235864f91fc8de551340e","sha256":"fbf8e9d067c8ed1fdc6d3a866c698ebb289e60cdc3166062c53bb0b45e68848d"}},"tags":["libssl2.3.0.so","xhide","fisieredoor","cryptocurrency-mining","rootkit","dictionary-attack","honeypot","xmrig","brute-force","ddos-bot","tsm","shellbot","goauto","ssh","brute force","linux","prometei","mirai","ssh servers","cryptomining","ddos bot","p2pinfect","perlbot","gafgyt","phishing","botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:14:43.021Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6acf2be335dd8bbd4e27ec2e","label":"OTX Pulse","domainType":"primary"},{"url":"https://otx.alienvault.com/pulse/6acf002e7c7fddeb927af2d8","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"otx-6acf2be17afb8c6c6b066bc9","source":"otx","category":"threat-intel","severity":"medium","title":"Q3 2026 Statistical Report on Malware Targeting Windows Database Servers","description":"During the third quarter of 2026, attackers targeted MS-SQL and MySQL servers on Windows systems through multiple attack vectors including brute-force attacks, dictionary attacks, and vulnerability exploitation. Threat actors deployed XMRig cryptocurrency miners, GotoHTTP backdoors, and SoftEther VP…","indicators":{"cves":[],"ips":["38.60.253.35"],"domains":["update.microsftapiedge.com","microsftapiedge.com"],"urls":[],"hashes":{"md5":"3de6a8f367d5d9f0a71fb5f1443c0e8f","sha1":"be82ac54a425db951de9b01943e8d9651ea92660","sha256":"e76b7d3b5da6a92510680df63758d377a28ef0c574e42786cddf0702bb6c3cb4"}},"tags":["credential theft","ringq","ms-sql","brute-force attacks","fscan","hackbrowserdata","cloudflared","cryptocurrency mining","xmrig","vshell","suo5","web shells","softether","database servers","sharp4webcmd","gotohttp","mysql","botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:14:41.505Z","fetchedAt":"2026-10-20T03:00:00.648Z","references":[{"url":"https://otx.alienvault.com/pulse/6acf2be17afb8c6c6b066bc9","label":"OTX Pulse","domainType":"primary"}],"feedLabel":null},{"id":"news-microsoft-disrupts-3-phishing-kits-linked-to-over-1-billion-scam-messages","source":"general-news","category":"news","severity":"medium","title":"Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages","description":"Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man Syst…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:09:15.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/microsoft-disrupts-3-phishing-kits.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-four-byte-write-and-timing-bug-let-researchers-run-code-in-windows-smartscreen-e","source":"general-news","category":"news","severity":"medium","title":"Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave","description":"Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.\n\nThe protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into hand…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:52:28.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/four-byte-write-and-timing-bug-let.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-yam-store-the-phishing-network-behind-a-billion-messages","source":"general-news","category":"news","severity":"medium","title":"Yam Store: The Phishing Network Behind a Billion Messages","description":"A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:57:16.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/cyberattacks-data-breaches/yam-store-phishing-network-behind-billion-messages","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-north-korea-phishes-ukrainians-for-war-intel","source":"general-news","category":"news","severity":"medium","title":"North Korea Phishes Ukrainians for War Intel","description":"The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:24:45.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/cyberattacks-data-breaches/north-korea-phishes-ukrainians-war-intel","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-new-aoki-infostealer-targets-ai-coding-assistant-credentials","source":"general-news","category":"news","severity":"medium","title":"New Aoki Infostealer Targets AI Coding Assistant Credentials","description":"Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["infostealer"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-microsoft-disrupts-global-yam-store-network-behind-one-billion-phishing-messages","source":"general-news","category":"news","severity":"medium","title":"Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages","description":"Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/microsoft-yam-store-one-billion/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-cybercriminals-favor-microsoft-over-apple-and-google-in-brand-phishing-attacks","source":"general-news","category":"news","severity":"medium","title":"Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks","description":"Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated brands in phishing attacks (Source: Check Point) Apple and Googl…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:38:17.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.helpnetsecurity.com/2026/10/19/check-point-brand-impersonation-scams-q3-2026-report/","label":"Help Net Security","domainType":"media"}],"feedLabel":null},{"id":"nvd-CVE-2026-108942","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-108942 — A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8…","description":"A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function create_html_for_item of the file modules/ui_extra_networks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description resu…","indicators":{"cves":["CVE-2026-108942"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:42.310Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://github.com/philz1337x/clarity-upscaler/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/philz1337x/clarity-upscaler/issues/72","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-108942","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/997640","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416767","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416767/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-58242","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-58242 — SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-priv…","description":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information abou…","indicators":{"cves":["CVE-2026-58242"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T01:16:46.073Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://me.sap.com/notes/3767634","label":"cna@sap.com","domainType":"other"},{"url":"https://url.sap/sapsecuritypatchday","label":"cna@sap.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100104","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-100104 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time…","indicators":{"cves":["CVE-2026-100104"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["transport"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:54.860Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/594194","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103549","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-103549 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package…","indicators":{"cves":["CVE-2026-103549"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:16:56.157Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/631531","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-82632","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-82632 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3…","description":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a fine-grained Personal Access Token scoped only to user-boundary import permissions…","indicators":{"cves":["CVE-2026-82632"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:17:00.057Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/626041","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3843143","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-9268","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-9268 — GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 bef…","description":"GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without proper…","indicators":{"cves":["CVE-2026-9268"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T02:17:00.973Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/","label":"cve@gitlab.com","domainType":"other"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/600934","label":"cve@gitlab.com","domainType":"other"},{"url":"https://hackerone.com/reports/3687442","label":"cve@gitlab.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109854","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-109854 — A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing IS…","description":"A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and limited…","indicators":{"cves":["CVE-2026-109854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:15.610Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-109854","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550285","label":"secalert@redhat.com","domainType":"other"},{"url":"https://cgit.git.savannah.nongnu.org/cgit/m17n/m17n-lib.git/commit/?id=f3b85087f90189f91c04ba1b62c5f0b879ff2b20","label":"secalert@redhat.com","domainType":"other"},{"url":"https://lists.gnu.org/archive/html/m17n-list/2026-10/msg00001.html","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109407","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-109407 — A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some u…","description":"A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The attack may be performed from remote. The…","indicators":{"cves":["CVE-2026-109407"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:19.500Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/macrozheng/mall/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/macrozheng/mall/issues/1003","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109407","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/979872","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416949","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416949/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107832","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-107832 — fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the…","description":"fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does not lowercase the enum or const header names nested inside a propertyNames subschema. As a result, a header allow-list or deny-lis…","indicators":{"cves":["CVE-2026-107832"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:19.167Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://cna.openjsf.org/security-advisories.html","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"other"},{"url":"https://github.com/fastify/fastify/security/advisories/GHSA-389g-gv7q-r4x8","label":"ce714d77-add3-4f53-aff5-83d477b104bb","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109410","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-109410 — A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the functio…","description":"A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated remotely…","indicators":{"cves":["CVE-2026-109410"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:25.870Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/macrozheng/mall/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/macrozheng/mall/issues/1004","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109410","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/982840","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416952","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/416952/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65197","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-65197 — H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from t…","description":"H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by an authenticated Redfish client through the `UpdateService.UploadSignKey` action, which stores the uploaded body verbatim after validating…","indicators":{"cves":["CVE-2026-65197"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:46.690Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.runzero.com/advisories/h3c-hdm-firmware-verification-key-replacement-cve-2026-65197","label":"44488dab-36db-4358-99f9-bc116477f914","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65200","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-65200 — The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bu…","description":"The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length without a lower-bound check. An undersized…","indicators":{"cves":["CVE-2026-65200"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:47.077Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.runzero.com/advisories/huawei-malicious-device-integer-underflow-cve-2026-65200","label":"44488dab-36db-4358-99f9-bc116477f914","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109526","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-109526 — A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown functio…","description":"A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgradi…","indicators":{"cves":["CVE-2026-109526"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:18.277Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://drive.google.com/drive/folders/13MjPi0zInT9Caau_fqD68FQ0z5fH0YsX?usp=sharing","label":"cna@vuldb.com","domainType":"other"},{"url":"https://github.com/HBAI-Ltd/Toonflow-app/releases/tag/v2.0.0","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-109526","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/984380","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417195","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/417195/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88834","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-88834 — A flaw was found in BusyBox's httpd web server. When configured with system password authentication,…","description":"A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limited t…","indicators":{"cves":["CVE-2026-88834"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:48.203Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-88834","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531348","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106175","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-106175 — A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS…","description":"A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, Fo…","indicators":{"cves":["CVE-2026-106175"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:14.823Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-182","label":"psirt@fortinet.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106176","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-106176 — A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unau…","description":"A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests","indicators":{"cves":["CVE-2026-106176"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:15.050Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-183","label":"psirt@fortinet.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110036","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110036 — A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (D…","description":"A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application…","indicators":{"cves":["CVE-2026-110036"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:42.963Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-110036","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2474403","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2474403","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110214","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110214 — Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to fo…","description":"Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE_DOWNLOAD_SIGN_SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to downl…","indicators":{"cves":["CVE-2026-110214"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:45.477Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/xiaonuobase/Snowy/blob/v3.6.5/snowy-plugin/snowy-plugin-dev/src/main/java/vip/xiaonuo/dev/modular/file/service/impl/DevFileServiceImpl.java#L419-L445","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xiaonuobase/Snowy/blob/v3.6.5/snowy-plugin/snowy-plugin-dev/src/main/java/vip/xiaonuo/dev/modular/file/service/impl/DevFileServiceImpl.java#L78","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xiaonuobase/Snowy/blob/v3.6.5/snowy-web-app/src/main/java/vip/xiaonuo/core/config/GlobalConfigure.java#L174-L175","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/snowy-dev-file-access-control","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/snowy-3.6.5-hard-coded-download-signature-key-allows-unauthenticated-file-download","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/snowy-dev-file-access-control","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110218","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110218 — Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated…","description":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view page. Attackers who know or guess a post slug can retrieve the full title, content, image, tags, author and publish dat…","indicators":{"cves":["CVE-2026-110218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:46.083Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/aureuserp/aureuserp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/blob/v1.6.0/plugins/webkul/blogs/src/Filament/Customer/Resources/PostResource.php#L23","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/blob/v1.6.0/plugins/webkul/blogs/src/Filament/Customer/Resources/PostResource/Pages/ViewPost.php#L9-L24","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aureuserp/aureuserp/releases/tag/v1.6.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@leediay/ryPaE-t9fl","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/aureus-erp-through-1.6.0-unpublished-blog-post-disclosure-via-direct-url","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110223","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110223 — Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authen…","description":"Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through DNS rebinding or HTTPS redirects. Attackers can submit a URL to POST /api/Cbl/upload-cbl-file whose host rebinds or redirects to internal addresses a…","indicators":{"cves":["CVE-2026-110223"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:46.877Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Kareadita/Kavita","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Kareadita/Kavita/blob/879b8b73eb41d66f88dde8eb874cc99a3397eb11/Kavita.Common/Helpers/FlurlConfiguration.cs#L46-L89","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Kareadita/Kavita/blob/879b8b73eb41d66f88dde8eb874cc99a3397eb11/Kavita.Server/Controllers/CBLController.cs#L82-L108","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/kavita-cbl-url-preflight-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/kavita-0.9.0-through-0.9.1.4-ssrf-blocklist-bypass-via-upload-cbl-file-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110225","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110225 — Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticate…","description":"Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata ad…","indicators":{"cves":["CVE-2026-110225"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:47.210Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/shaarli/Shaarli","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shaarli/Shaarli/blob/bfeadb4e5856702c05279bb2a5c405f2ed802015/application/Thumbnailer.php#L82-L98","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/shaarli/Shaarli/blob/bfeadb4e5856702c05279bb2a5c405f2ed802015/application/front/controller/admin/ThumbnailsController.php#L46-L64","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/shaarli-open-mode-thumbnail-fetch-ssrf","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/shaarli-through-0.16.9-ssrf-via-thumbnail-retrieval-update-thumbnail-route","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110232","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110232 — Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP a…","description":"Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../<name>_x/file to create or overwrite files in sibling fol…","indicators":{"cves":["CVE-2026-110232"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:48.180Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/FossifyOrg/File-Manager/blob/82b3c98c9a7b90d8af2c2ff0c39c87f5917e1b08/app/src/main/kotlin/org/fossify/filemanager/activities/DecompressActivity.kt#L161-L189","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/FossifyOrg/File-Manager/releases/tag/1.6.2","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/Hk2woGjsze","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/fossify-file-manager-through-1.6.2-zip-slip-path-traversal-via-decompressactivity","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110256","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110256 — Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function…","description":"Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such as…","indicators":{"cves":["CVE-2026-110256"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.987Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/Finsys/dockhand/security/advisories/GHSA-vmm5-cjvh-7vmv","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/dockhand-before-1.0.19-username-enumeration-via-ldap-injection-in-tryldapauth","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108388","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-108388 — Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the a…","description":"Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user instead of the user supplied to Contribution.can_manage when checking inherited event contribution-management permission. A low-privileged user can induce a privileged user to…","indicators":{"cves":["CVE-2026-108388"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T21:17:34.547Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/indico/indico/commit/0e71da31fc21d0ed0ce687cce5b745ba2fad0b92","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/indico/indico/commit/5985cfa65a3441b7d3ca4ef1a9dc177c82ea0f26","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/indico/indico/releases/tag/v3.3.14","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/indico/indico/security/advisories/GHSA-p9vj-86c7-h7q3","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110141","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110141 — Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to…","description":"Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)","indicators":{"cves":["CVE-2026-110141"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:17:33.890Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","label":"chrome-cve-admin@google.com","domainType":"other"},{"url":"https://issues.chromium.org/issues/568895734","label":"chrome-cve-admin@google.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77205","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-77205 — Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, bu…","description":"Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add_decoded_…","indicators":{"cves":["CVE-2026-77205"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:18:24.577Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://libreswan.org/security/CVE-2026-14957/CVE-2026-14957.txt","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"},{"url":"https://libreswan.org/security/CVE-2026-77205/","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"},{"url":"https://libreswan.org/security/CVE-2026-77205/CVE-2026-77205.txt","label":"d42dc95b-23f1-4e06-9076-20753a0fb0df","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110457","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110457 — A malicious actor with access to the network and under certain conditions could exploit a Path Trave…","description":"A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device.","indicators":{"cves":["CVE-2026-110457","CVE-2026-110458"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T06:17:05.990Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73","label":"fe490ce8-0395-4072-90d8-2707e1bdf984","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108066","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-108066 — The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before re…","description":"The WP 2FA  WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove the 2FA configuration of users outside their own site, including accounts they…","indicators":{"cves":["CVE-2026-108066"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:17:02.303Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://wpscan.com/vulnerability/a41461a7-c9f4-4d80-9f15-1ab934206de8/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73791","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-73791 — A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.","description":"A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow.","indicators":{"cves":["CVE-2026-73791"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:54.190Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-73792","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-73792 — A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflo…","description":"A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.","indicators":{"cves":["CVE-2026-73792"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T10:17:56.290Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88842","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-88842 — A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor bet…","description":"A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limite…","indicators":{"cves":["CVE-2026-88842"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:06.993Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:81391","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-88842","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531355","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110262","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110262 — OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons Adv…","description":"OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class files. Attackers can craft bytecode with many forward jump targets in constructors, causing unbounded stack copies in forw…","indicators":{"cves":["CVE-2026-110262"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:08.103Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://asm.ow2.io/versions.html","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/blob/ASM_9_10_1/asm-commons/src/main/java/org/objectweb/asm/commons/AdviceAdapter.java#L96","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/commit/b7e6c88801790c9da214efd0498aecb9402796a0","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://gitlab.ow2.org/asm/asm/-/merge_requests/464","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/ow2-asm-3.1-before-9.11-excessive-memory-allocation-in-adviceadapter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110592","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110592 — BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template()…","description":"BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to inject markup into custom-template invoice PDFs. Attackers can place HTML and CSS in notes, terms, client name or address fields to overlay totals, pa…","indicators":{"cves":["CVE-2026-110592"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:10.043Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/Django-CRM/Django-CRM/blob/v1.14.5/backend/invoices/pdf.py#L660-L712","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/Django-CRM/Django-CRM/issues/825","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/aaronamran/CVE-Disclosures/tree/main/CVE-2026/CVE-2026-110592","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/bottlecrm-0.30-through-1.14.5-html-injection-via-custom-invoice-pdf-template","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/Django-CRM/Django-CRM/issues/825","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110604","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110604 — Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when…","description":"Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the proc…","indicators":{"cves":["CVE-2026-110604"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:11.967Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/michaelrsweet/mxml/blob/v4.0.6/mxml-file.c#L1860-L1887","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/michaelrsweet/mxml/commit/367c7ddd3387f65e867d776216de274bcaa3dae1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/mxml-strtod-locale-stack-overflow","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/mini-xml-4.0.0-through-4.0.6-stack-out-of-bounds-write-via-mxml-strtod","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haind-pwn/cve-2026-110604-mxml-strtod-locale-stack-overflow","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110606","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110606 — LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds re…","description":"LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader() caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC1018, AC1024 or AC1027 DWG file without NUL bytes in the decr…","indicators":{"cves":["CVE-2026-110606"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:12.303Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/LibreCAD/LibreCAD/blob/v2.2.1.5/libraries/libdxfrw/src/intern/dwgreader18.cpp#L248","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LibreCAD/LibreCAD/commit/abd1f4a8e32dbd871c986086227502217200cd4b","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LibreCAD/LibreCAD/issues/2554","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LibreCAD/libdxfrw/blob/LC2.2.0/src/intern/dwgreader18.cpp#L248","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/LibreCAD/libdxfrw/commit/0c5595930b20917a40ed7c188475eaca624b8ce9","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/libdxfrw-dwg-header-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/librecad-libdxfrw-through-lc2-2.0-stack-out-of-bounds-read-via-dwgreader18-readfileheader","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/LibreCAD/LibreCAD/issues/2554","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-60008","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-60008 — Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS clas…","description":"Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in the main document without an iframe sandbox. A malicious repository notebook can supply multiple CSS classes that create a viewport-c…","indicators":{"cves":["CVE-2026-60008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:20.787Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://blog.gitea.com/release-of-1.27.2/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/38793","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/38795","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v1.27.2","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-7452-653r-6gp8","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110655","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110655 — miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml par…","description":"miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses endi…","indicators":{"cves":["CVE-2026-110655","CVE-2026-110656"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:42.217Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/miniupnp/miniupnp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/miniupnp/miniupnp/blob/bf4215a7574f88aa55859db9db00e3ae58cf42d6/miniupnpc/src/minixml.c#L61","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/miniupnp/miniupnp/commit/3cfb4fb78d5ac04ed0dadc8dd842fc9e448916db","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/miniupnpc-minixml-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/miniupnpc-through-2.3.3-heap-out-of-bounds-read-via-minixml-parseatt","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/miniupnp/miniupnp/blob/bf4215a7574f88aa55859db9db00e3ae58cf42d6/miniupnpc/src/minixml.c#L141","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/miniupnp/miniupnp/commit/64ef08a12aabab57be0bf7e40f047c8f14dedf9c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/miniupnpc-through-2.3.3-heap-out-of-bounds-read-via-minixml-parseelt","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110657","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110657 — Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulner…","description":"Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or ov…","indicators":{"cves":["CVE-2026-110657"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:42.500Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/KhronosGroup/NNEF-Tools","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/KhronosGroup/NNEF-Tools/blob/0bb9c04fcf69c19e0aefa1ba9bf65f05478c8f81/nnef-pyproject/nnef/__init__.py#L87","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SJiYagajfe","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/khronos-nnef-tools-nnef-through-1.0.10-and-nnef-tools-through-1.0.11-path-traversal-via-variable-label","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SJiYagajfe","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110660","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110660 — vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 dec…","description":"vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221_lib.c, whose bit reader refills without checking the data_u32 array end. Attackers can supply crafted .s14 or .sss files that drive decode_vector_quantized_mlt_indices() past the stack b…","indicators":{"cves":["CVE-2026-110660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:42.920Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/vgmstream/vgmstream","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/vgmstream/vgmstream/blob/71e2361042531fe767fb98300cf8c1ee95e539a0/src/coding/libs/g7221_lib.c#L838","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/vgmstream-g7221-bitreader-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/vgmstream-through-r2117-stack-out-of-bounds-read-via-g-722.1-siren14-decoder","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110661","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110661 — CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that a…","description":"CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFI_stridx_c to scan past disk_node_data,…","indicators":{"cves":["CVE-2026-110661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:43.057Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/CGNS/CGNS","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/CGNS/CGNS/blob/3a972d92559787a49c5f9a54974ea1946ecb9d21/src/adf/ADF_internals.c#L6828","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haind-pwn/cgns-adf-node-header-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/cgns-through-4.5.2-stack-out-of-bounds-read-via-adfi-read-node-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110734","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110734 — Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (…","description":"Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's repe…","indicators":{"cves":["CVE-2026-110734"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:44.320Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://axeghost.offprint.app/a/3mvs6zo4blo23-three-memory-safety-bugs-in-godots-untrusted-file-parsers","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/godotengine/godot/issues/123608","label":"cve@mitre.org","domainType":"primary"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/15/4","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110735","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110735 — Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/res…","description":"Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a…","indicators":{"cves":["CVE-2026-110735"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:44.467Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://axeghost.offprint.app/a/3mvs6zo4blo23-three-memory-safety-bugs-in-godots-untrusted-file-parsers","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/godotengine/godot/issues/123608","label":"cve@mitre.org","domainType":"primary"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/15/3","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110736","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110736 — Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/strin…","description":"Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message). Offsets read from the hash table of a crafted .translation resource are used as indices into the bucket table without bounds validation…","indicators":{"cves":["CVE-2026-110736"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:44.607Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://axeghost.offprint.app/a/3mvs6zo4blo23-three-memory-safety-bugs-in-godots-untrusted-file-parsers","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/godotengine/godot/issues/123608","label":"cve@mitre.org","domainType":"primary"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/15/2","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"https://axeghost.offprint.app/a/3mvs6zo4blo23-three-memory-safety-bugs-in-godots-untrusted-file-parsers","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-49206","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-49206 — rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRo…","description":"rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted size_t indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements, an index above INT_M…","indicators":{"cves":["CVE-2026-49206"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:45.667Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/d99kris/rapidcsv/commit/68f57cc6c83d5e0992904398822453489d8dfac1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/d99kris/rapidcsv/issues/220","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/d99kris/rapidcsv/releases/tag/v8.99","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/d99kris/rapidcsv/security/advisories/GHSA-v83v-8j5q-6553","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77572","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-77572 — VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier,…","description":"VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the VeraCrypt Windows veracrypt.sys driver accept caller-supplied object-manager and device paths broader than supported VeraCrypt workflows require. A local user w…","indicators":{"cves":["CVE-2026-77572"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:53.863Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/veracrypt/VeraCrypt/commit/ca35405421df549e75f1f241259bdda0c5b67d40","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-9mgv-w2fw-3m78","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101946","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-101946 — An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evo…","description":"An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to disclose limited rpd process memory and disrupt an LDP adjacency via an IPv6 LDP message.","indicators":{"cves":["CVE-2026-101946"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:17:47.567Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://supportportal.juniper.net/JSA112187","label":"sirt@juniper.net","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77564","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-77564 — Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, ta…","description":"Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml in generated support bundles instead of marking or…","indicators":{"cves":["CVE-2026-77564"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:19:11.437Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/siderolabs/talos/commit/4c288caf2de1db7f84bba0539ca5ed7d6ecb9142","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/commit/76080416beee6460375c0d0db3cab76cc493ad3e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/commit/7dc716d850e43373ba8702c702105f4edd68fceb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/pull/13345","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/pull/13434","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/pull/13611","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/releases/tag/v1.12.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/releases/tag/v1.13.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/siderolabs/talos/security/advisories/GHSA-7cxh-94cf-mfp6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93637","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-93637 — An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unau…","description":"An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP requ…","indicators":{"cves":["CVE-2026-93637"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:21.430Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1","label":"cve@rapid7.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103930","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-103930 — cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream i…","description":"cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream in httplib.h accepts a caller-controlled path that reaches detail::write_request_line() without the detail::encode_path() protection used by the ordinary buffered request path. Raw carriage-return and…","indicators":{"cves":["CVE-2026-103930"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:07.657Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/yhirose/cpp-httplib/commit/255c075b82cf9f221e6e607e8e6789e6e2bf4c2a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/yhirose/cpp-httplib/pull/2501","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/yhirose/cpp-httplib/releases/tag/v0.51.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-vq69-f637-8fhr","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110762","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110762 — bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated v…","description":"bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title, permalink…","indicators":{"cves":["CVE-2026-110762"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:11.897Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://bbpress.org/blog/2026/09/bbpress-2-6-19-is-out/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/bbpress/bbPress/blob/04c6f1513c6ca34e849ca16015b7a08b3c15e753/src/includes/extend/buddypress/activity.php#L431","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/bbpress/bbPress/commit/5dce23a0b23a22d32c45b96fd44588952b16fe8a","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://wordpress.org/plugins/bbpress/","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/bbpress-before-2.6.19-information-disclosure-via-buddypress-activity-stream","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-82153","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-82153 — Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Informatio…","description":"Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.","indicators":{"cves":["CVE-2026-82153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:21.533Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000517461/dsa-2026-450-security-update-for-dell-os-recovery-tool-for-an-insecure-storage-of-sensitive-information-vulnerability","label":"security_alert@emc.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110861","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110861 — Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/…","description":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update. Remote attackers can send…","indicators":{"cves":["CVE-2026-110861"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:27.490Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/better-auth/better-auth/security/advisories/GHSA-44jh-23m7-hpcf","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/better-auth-drizzle-adapter-1.6.17-before-1.7.7-rate-limit-bypass-via-race-condition","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110810","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110810 — A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_…","description":"A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position.…","indicators":{"cves":["CVE-2026-110810"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T01:19:27.600Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/ggml-org/whisper.cpp/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ggml-org/whisper.cpp/commit/60c0be6ac8fa71b1a2ae2dd938a31a34a508e774","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ggml-org/whisper.cpp/issues/4090","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ggml-org/whisper.cpp/pull/4091","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/ggml-org/whisper.cpp/releases/tag/v1.9.5","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-110810","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1004714","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420280","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/420280/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79835","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-79835 — A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.","description":"A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.","indicators":{"cves":["CVE-2026-79835"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:16:39.673Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US","label":"security-alert@hpe.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53575","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-53575 — EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an authentic…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an authenticated administrator can place crafted content in the applicationName setting through CSP nonce injection. The persistent injection is inserted into the main application page without escaping, allowing…","indicators":{"cves":["CVE-2026-53575"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:35.340Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/ce73338ea7b463914e1271f16f8f73131ace886f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-f34h-xxmv-j9xp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55184","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-55184 — EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with…","description":"EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission can store crafted HTML that bypasses moderateSanitizeHtml(). When another user opens the template in edit mode and clientCspDisabled is true, the stored…","indicators":{"cves":["CVE-2026-55184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:35.777Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/67223bfb82338c030f38dac03f12c73b7b3d760f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/9.3.9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-x5p5-8mxj-9wv6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55876","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-55876 — Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, t…","description":"Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG and HTML attachments because conf/configs/common.py omits those formats from BLOCKED_ATTACHMENT_EXTENSIONS and BLOCKED_A…","indicators":{"cves":["CVE-2026-55876"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["phishing"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:17:28.307Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/HeliumEdu/platform/commit/f0de5c985c701942758b805a3d11dfb008a6af88","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/HeliumEdu/platform/security/advisories/GHSA-7r65-76fw-ch5c","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111169","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111169 — La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated…","description":"La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resource_id, inserting comments in…","indicators":{"cves":["CVE-2026-111169"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:32.977Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/suitenumerique/docs","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/suitenumerique/docs/blob/dbf8fece4e72292443dc71ff173593551203d011/src/backend/core/api/permissions.py#L178-L182","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/suitenumerique/docs/blob/dbf8fece4e72292443dc71ff173593551203d011/src/backend/core/api/serializers.py#L929-L931","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/suitenumerique/docs/blob/dbf8fece4e72292443dc71ff173593551203d011/src/backend/core/api/viewsets.py#L3278-L3282","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/suitenumerique/docs/commit/43f97482dfb968264dceccabb76e155791c8e019","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/suitenumerique/docs/pull/2838","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/la-suite-docs-through-6.0.0-authorization-bypass-via-comment-thread-creation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111332","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111332 — OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous…","description":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder…","indicators":{"cves":["CVE-2026-111332"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:31.507Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/AtalayaLabs/OxiCloud","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AtalayaLabs/OxiCloud/blob/v0.9.3/src/application/services/share_service.rs#L497-L538","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AtalayaLabs/OxiCloud/blob/v0.9.3/src/infrastructure/services/share_ring.rs#L173-L195","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/oxicloud-share-password-grant-not-revoked","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/oxicloud-0.9.1-through-0.9.3-incorrect-authorization-via-share-ring-cookie","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111354","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111354 — crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated memb…","description":"crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking number…","indicators":{"cves":["CVE-2026-111354"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T22:19:33.353Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://github.com/crmeb/crmeb_java/blob/31bb30dd240dc1168c7eeef065edf36b9700022e/backend/crmeb-service/src/main/java/com/zbkj/service/service/impl/OrderServiceImpl.java#L2100-L2109","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/crmeb/crmeb_java/blob/31bb30dd240dc1168c7eeef065edf36b9700022e/backend/crmeb-service/src/main/java/com/zbkj/service/service/impl/OrderServiceImpl.java#L766-L771","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/crmeb/crmeb_java/blob/31bb30dd240dc1168c7eeef065edf36b9700022e/backend/crmeb-service/src/main/java/com/zbkj/service/service/impl/OrderServiceImpl.java#L832-L836","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/crmeb-java-order-express-refund-cross-member-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/crmeb-java-through-3.1-authorization-bypass-via-front-order-express-and-refund-endpoints","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/crmeb-java-order-express-refund-cross-member-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111448","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111448 — Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sens…","description":"Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct sibling…","indicators":{"cves":["CVE-2026-111448"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:31.143Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/wheels-dev/wheels/security/advisories/GHSA-m63x-8m98-225v","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109401","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-109401 — The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all vers…","description":"The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'email_address' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to extract complete logged mail rows…","indicators":{"cves":["CVE-2026-109401"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:09.887Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.17.0/lib/vendor/brandonwamboldt/wp-orm/src/Query.php#L399","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.17.0/src/WPML_PrivacyController.php#L76","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/browser/wp-mail-logging/tags/1.17.0/src/WPML_PrivacyController.php#L82","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset/3746095/wp-mail-logging/trunk/src/WPML_PrivacyController.php?old=3464813&old_path=wp-mail-logging%2Ftrunk%2Fsrc%2FWPML_PrivacyController.php","label":"security@wordfence.com","domainType":"other"},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3746095%40wp-mail-logging%2Ftags%2F1.17.1&old=3705796%40wp-mail-logging%2Ftags%2F1.17.0","label":"security@wordfence.com","domainType":"other"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f2b96f36-090d-4ed3-aa2c-dafa89d255cc?source=cve","label":"security@wordfence.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110039","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110039 — The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting t…","description":"The Smush  WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network.","indicators":{"cves":["CVE-2026-110039"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.573Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/4f27b2fd-1b27-4274-85c5-f19e6998aa44/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110191","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110191 — The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capabilit…","description":"The Product Delivery Date for WooCommerce  WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, allowing users with a role as low as Contributor to view other customers' order information.","indicators":{"cves":["CVE-2026-110191"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T07:17:10.920Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://wpscan.com/vulnerability/d7310c1a-f858-4dc5-8102-813fb64096a6/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110805","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110805 — Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier…","description":"Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.","indicators":{"cves":["CVE-2026-110805"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:22.343Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://devolutions.net/security/advisories/DEVO-2026-0036/","label":"security@devolutions.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111581","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111581 — A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pas…","description":"A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows…","indicators":{"cves":["CVE-2026-111581"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:17:04.680Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-111581","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554104","label":"secalert@redhat.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109839","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-109839 — IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions d…","description":"IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm.","indicators":{"cves":["CVE-2026-109839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:31.713Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292486","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111604","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111604 — eladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped use…","description":"eladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped user managers to modify or delete accounts outside their data scope because write handlers skip department checks. Attackers with user:edit or user:del permissions can send PUT or DELETE requests to /api…","indicators":{"cves":["CVE-2026-111604"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:39.367Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/elunez/eladmin","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/elunez/eladmin/blob/v2.7/eladmin-system/src/main/java/me/zhengjie/modules/system/rest/UserController.java#L118-L152","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/eladmin-user-update-delete-missing-dept-data-scope","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/eladmin-through-2.7-broken-access-control-via-api-users-update-and-delete","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111609","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111609 — PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability…","description":"PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription ids. Attackers can enumerate sequential ids through editSubscription to view su…","indicators":{"cves":["CVE-2026-111609"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:40.103Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/pkp/ojs/blob/3_5_0-5/controllers/grid/subscriptions/IndividualSubscriptionForm.php#L47-L51","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/pkp/ojs/blob/3_5_0-5/controllers/grid/subscriptions/InstitutionalSubscriptionForm.php#L57-L62","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/ojs-subscription-form-cross-journal-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/pkp-open-journal-systems-through-3.5.0-5-cross-journal-subscription-idor-via-updatesubscription","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111624","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111624 — Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unau…","description":"Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unauthenticated clients to connect to the backoffice PreviewHub and BackofficeHub SignalR hubs. Attackers can complete the SignalR negotiate step and receive refreshed notifications that disclose content…","indicators":{"cves":["CVE-2026-111624"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:42.280Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/umbraco/Umbraco-CMS/blob/release-18.2.0/src/Umbraco.Cms.Api.Management/Preview/PreviewHub.cs#L9-L11","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/umbraco/Umbraco-CMS/blob/release-18.2.0/src/Umbraco.Cms.Api.Management/Preview/PreviewHubUpdater.cs#L58","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/umbraco/Umbraco-CMS/commit/243e082479c777d0f585bbd2f8db571607767b22","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/umbraco/Umbraco-CMS/commit/b4f6cfc9d0955f9d8443e68353db4a692e91bd94","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/umbraco/Umbraco-CMS/releases/tag/release-17.7.1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/umbraco/Umbraco-CMS/releases/tag/release-18.2.1","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-4c5q-6c64-96j7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/umbraco-cms-before-17.7.1-and-18.2.1-missing-authorization-on-signalr-hubs","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111648","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111648 — BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows auth…","description":"BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via the id parameter. Attackers holding the routine/adminInfo/edit permission can overwrite avatar, nickname, email, mobile an…","indicators":{"cves":["CVE-2026-111648"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:45.753Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/build-admin/buildadmin","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/build-admin/buildadmin/blob/468652294e6a6a794bf1113f0847b93337d69fb4/app/admin/controller/routine/AdminInfo.php#L36-L89","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/buildadmin-admininfo-edit-cross-admin-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/buildadmin-through-2.3.9-idor-via-routine-admininfo-edit-id-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111655","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111655 — ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerabili…","description":"ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with co…","indicators":{"cves":["CVE-2026-111655"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:46.803Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/zoujingli/ThinkLibrary/blob/v6.1.101/src/helper/FormHelper.php#L51-L86","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zoujingli/ThinkLibrary/blob/v6.1.101/src/service/SystemService.php#L206-L222","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/zoujingli/think-plugs-admin/blob/v1.0.81/src/controller/File.php#L52-L82","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/thinkadmin-file-edit-missing-owner-scope-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/thinkadmin-think-plugs-admin-through-1.0.81-idor-via-admin-file-edit","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@hieuPenguinnn/thinkadmin-file-edit-missing-owner-scope-idor","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111658","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111658 — SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController…","description":"SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators to access other sites' channels by supplying foreign channel IDs. Attackers with Channels permission on one site can read and overwrite another site's channel na…","indicators":{"cves":["CVE-2026-111658"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:47.227Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/siteserver/cms/blob/sscms-v7.2.1/src/SSCMS.Web/Controllers/Admin/Cms/Channels/ChannelsController.Get.cs#L16-L41","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/siteserver/cms/blob/sscms-v7.2.1/src/SSCMS.Web/Controllers/Admin/Cms/Channels/ChannelsController.Update.cs#L14-L31","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@hieuPenguinnn/sscms-cross-site-channel-idor","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/siteserver-sscms-through-7.4.0-cross-site-authorization-bypass-via-channels-api","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111678","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111678 — Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8Chr…","description":"Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiword o…","indicators":{"cves":["CVE-2026-111678"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:50.627Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/rsdoiel/antiword/blob/fe4b579067122a2d9d62647efb1ee7cfe3ca92bb/prop8.c#L1461-L1474","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/rsdoiel/antiword/blob/fe4b579067122a2d9d62647efb1ee7cfe3ca92bb/prop8.c#L997-L1022","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/antiword-word8-plcflst-count-and-fkp-run-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/antiword-through-0.37-stack-out-of-bounds-read-via-prop8-c-fkp-parsing","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111714","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111714 — tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that al…","description":"tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to block visitor pages by supplying unescaped cookie names to cookie.purge. Attackers can plant a cookie from a sibling subdomain or inject a purgeBtn element with a catastrophic-backtr…","indicators":{"cves":["CVE-2026-111714"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T18:17:55.723Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/AmauriC/tarteaucitron.js/blob/v1.36.0/tarteaucitron.js#L2169-L2175","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AmauriC/tarteaucitron.js/commit/60faaba5fd541cad770549d422fc4ac7de657e56","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/AmauriC/tarteaucitron.js/releases/tag/v1.37.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/tarteaucitron-js-before-1.37.0-redos-via-unescaped-cookie-name-in-cookie-purge","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17275","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-17275 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of d…","description":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.","indicators":{"cves":["CVE-2026-17275"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:17:06.313Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292222","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17591","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-17591 — A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential informa…","description":"A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function de…","indicators":{"cves":["CVE-2026-17591"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:01.420Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:77775","label":"secalert@redhat.com","domainType":"other"},{"url":"https://access.redhat.com/security/cve/CVE-2026-17591","label":"secalert@redhat.com","domainType":"other"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554209","label":"secalert@redhat.com","domainType":"other"},{"url":"https://github.com/libarchive/libarchive/pull/3318","label":"secalert@redhat.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-92431","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-92431 — The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its fu…","description":"The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.","indicators":{"cves":["CVE-2026-92431"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:34.257Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://wpscan.com/vulnerability/58797977-b859-4637-898d-d82675c36eea/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111888","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111888 — phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows deleg…","description":"phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWS_DELETE instead of NEWS_EDIT. Attackers holding addnews and delnews can read the update-ne…","indicators":{"cves":["CVE-2026-111888"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:30.080Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-287v-6c6j-x9f7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/phpmyfaq-4.0.0-before-4.1.9-incorrect-authorization-via-news-update-api","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-287v-6c6j-x9f7","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111926","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111926 — Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 who…","description":"Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this endpoi…","indicators":{"cves":["CVE-2026-111926"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:35.390Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-73wg-wxvv-9r4j","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-from-2.10.0-before-2.34.8-information-disclosure-via-agent-debug-manifest","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111932","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111932 — Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains…","description":"Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL appearance settings are rendered into HTML output without sufficient escaping. Attackers with the Owner role can store HTM…","indicators":{"cves":["CVE-2026-111932","CVE-2026-111933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:36.217Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-h58c-xccx-75m3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-before-2.34.2-stored-html-injection-via-appearance-settings","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://github.com/coder/coder/security/advisories/GHSA-8fxq-53rx-ph5f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-before-2.34.2-user-enumeration-via-login-placeholder-hash","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111934","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111934 — Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware tha…","description":"Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied X-Forwarded-For value instead of the client IP appended by a reverse proxy. Attackers can send forged X-Forwarded-For values through appending proxies to bypass…","indicators":{"cves":["CVE-2026-111934"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T19:16:36.497Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/coder/coder/security/advisories/GHSA-vprw-xcrv-287h","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/coder-before-2.34.7-ip-spoofing-via-x-forwarded-for-header","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111874","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111874 — A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/…","description":"A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSubAction causes improper restriction of excessive authentication attempts. Remote exploitation of the…","indicators":{"cves":["CVE-2026-111874"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T06:16:56.380Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://gist.github.com/asdfghjkl12345678910111/851e7548613e4ae1b8b246edb2ca7c28","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/opencats/OpenCATS/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/opencats/OpenCATS/commit/1cf4fa3ee9054314b023be79d404078645c22ade","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/opencats/OpenCATS/issues/905","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/opencats/OpenCATS/pull/906","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111874","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1005051","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421586","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421586/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112004","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112004 — Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows a…","description":"Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so attac…","indicators":{"cves":["CVE-2026-112004"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:12.647Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/teableio/teable/blob/release.2026-10-02T04-02-20Z.3278/apps/nestjs-backend/src/features/base-node/folder/base-node-folder.service.ts#L39-L67","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/teableio/teable/commit/3c1c4646bfddfb14b1f2fbab8d0e1189969fa304","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/teableio/teable/releases/tag/release.2026-10-12T12-45-53Z.3331","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/teableio/teable/security/advisories/GHSA-5qj3-rq3x-q739","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/teable-before-2026-10-12t12-45-53z-3331-authorization-bypass-via-folder-rename-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112050","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112050 — Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote at…","description":"Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link with their own authorization code opened…","indicators":{"cves":["CVE-2026-112050"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["ransomware"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T13:16:37.050Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/gitify-app/gitify/blob/v7.9.0/src/renderer/utils/forges/github/flows.ts#L35-L76","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gitify-app/gitify/commit/10235b243e167a7c76eafd6a3d0ebc8c575eebc7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gitify-app/gitify/issues/3425","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/gitify-app/gitify/releases/tag/v7.10.0","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/gitify-before-7.10.0-login-csrf-via-missing-oauth-state-validation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111993","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111993 — A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. I…","description":"A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is restricted…","indicators":{"cves":["CVE-2026-111993"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T17:16:43.020Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Soarkey/StudentManagement/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/Soarkey/StudentManagement/issues/36","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-111993","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008019","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421658","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421658/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97204","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-97204 — Deleting a label compared the ID of the repository in the request against the organization ID of org…","description":"Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap. A user with write access to the issues of a repository could therefore delete the labels of an organization that has the same numeric ID as that rep…","indicators":{"cves":["CVE-2026-97204"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:33.530Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39743","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39752","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-fxq4-gr55-7x5g","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112026","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112026 — A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d…","description":"A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the file App/Home/Model/UserModel.class.php. The manipulation of the argument Password leads to password hash with insuffici…","indicators":{"cves":["CVE-2026-112026"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":["botnet"],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T23:16:55.750Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/light0011/cms/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/light0011/cms/issues/14","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112026","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008071","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421674","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421674/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112029","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112029 — A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the…","description":"A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to password hash with insufficient computational effort. The attack…","indicators":{"cves":["CVE-2026-112029"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T23:16:56.417Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/452","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112029","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008077","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421677","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421677/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112031","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112031 — A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the func…","description":"A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the component Ticket Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may…","indicators":{"cves":["CVE-2026-112031"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T00:16:31.587Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/chamilo/chamilo-lms/commit/cb6fe2127e587603451c609b4ed78c0293fcc3fa","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/chamilo/chamilo-lms/pull/9228","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wj7h-p8jp-jqxw","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112031","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1025429","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421679","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421679/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112037","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112037 — A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected…","description":"A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCorePlugin/lib/vendor/gapi/gapi.class.php of the component Google Analytics Client. Executing a manipulation can lead to improper certificate validation. The attac…","indicators":{"cves":["CVE-2026-112037"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T02:17:06.133Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/454","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112037","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008079","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421685","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421685/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112038","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112038 — A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.…","description":"A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. The manipulation leads to cross site scripting. Remote explo…","indicators":{"cves":["CVE-2026-112038"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T02:17:06.313Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/455","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112038","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008080","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421686","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421686/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112039","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112039 — A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affec…","description":"A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administrative Console. The manipulation of the argument dm_command resu…","indicators":{"cves":["CVE-2026-112039"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T02:17:06.503Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/456","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112039","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008082","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421687","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421687/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112041","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112041 — A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.…","description":"A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryptographically weak prng. The attack may be performed from remot…","indicators":{"cves":["CVE-2026-112041"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T02:17:06.840Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/458","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112041","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008084","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421689","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421689/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112042","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112042 — A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb48…","description":"A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function dmBaseLinkTag::text of the file dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php of the component dmWidget. Performing a manipulation of the argument text results…","indicators":{"cves":["CVE-2026-112042"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T03:16:58.720Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/diem-project/diem/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/diem-project/diem/issues/459","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112042","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1008105","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421690","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421690/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110034","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-110034 — The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when su…","description":"The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.","indicators":{"cves":["CVE-2026-110034"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:30.513Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/e3a64d4d-92db-4dbc-a0b5-58bca4d8b5c4/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-91831","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-91831 — The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a…","description":"The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing users with Author-level access and above to inject arbitrary e-mail headers, such as a hidden Bcc, and to spoof the sender.","indicators":{"cves":["CVE-2026-91831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T07:16:32.187Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://wpscan.com/vulnerability/6cd60f78-f5e2-4b4a-8d50-7d2bc4f981ee/","label":"contact@wpscan.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112095","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112095 — A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the fi…","description":"A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the component Product Management. Executing a manipulation of the argument Product_Id/Product_Name can lead to cross site scripting. The attack may be perfo…","indicators":{"cves":["CVE-2026-112095"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:07.400Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Mohnad-AL-saif/MyCVEs/blob/main/VulDB/Inventory-System/CVE-01-XSS-products.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112095","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1012164","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421919","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421919/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112096","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112096 — A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects un…","description":"A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of the argument Product_Name/Product_Code/Vendor_Name leads to cro…","indicators":{"cves":["CVE-2026-112096"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:07.570Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Mohnad-AL-saif/MyCVEs/blob/main/VulDB/Inventory-System/CVE-02-XSS-purchases.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112096","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1012166","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421920","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421920/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112097","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112097 — A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown pr…","description":"A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the argument Hsn_Code results in cross site scripting. It is possible…","indicators":{"cves":["CVE-2026-112097"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:07.740Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/Mohnad-AL-saif/MyCVEs/blob/main/VulDB/Inventory-System/CVE-03-XSS-sales.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112097","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1012175","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421921","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/421921/cti","label":"cna@vuldb.com","domainType":"other"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112103","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112103 — A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects th…","description":"A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function _curl of the file web.php of the component HTTP Client. Such manipulation leads to improper certificate validation. The attack may be performed from remote. Attacks of this nature are highl…","indicators":{"cves":["CVE-2026-112103"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:16.773Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/f3-factory/fatfree-core/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/f3-factory/fatfree-core/commit/a2c755c8dc9ad0eb7d5fd261b09aff90f649433c","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/f3-factory/fatfree-core/issues/412","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/f3-factory/fatfree-core/releases/tag/3.9.3","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112103","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013092","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422019","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422019/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112105","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112105 — A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the functi…","description":"A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpOverrides in the library lib/main.dart of the component TLS Handler. Such manipulation leads to improper certificate validation. The attack may be launched remotely. This attack is characteri…","indicators":{"cves":["CVE-2026-112105"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:17.143Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/GlitterWare/Passy/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/GlitterWare/Passy/commit/3d48df7cce05e39fa4de1e42768492307f26882e","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/GlitterWare/Passy/issues/210","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/GlitterWare/Passy/releases/tag/v1.10.2","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112105","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013135","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422055","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422055/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112106","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112106 — A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497b…","description":"A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation. It…","indicators":{"cves":["CVE-2026-112106"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:17.310Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/TufayelLUS/TikTok-Video-Downloader-PHP/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/TufayelLUS/TikTok-Video-Downloader-PHP/commit/64c0155abb88e714198241d41b918cefc0d5a42a","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/TufayelLUS/TikTok-Video-Downloader-PHP/issues/55","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112106","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1013136","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422061","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422061/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111935","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111935 — NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysi…","description":"NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing imag…","indicators":{"cves":["CVE-2026-111935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:01.043Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/codexu/note-gen/blob/note-gen-v0.38.3/src/lib/chat-image-context.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/codexu/note-gen/blob/note-gen-v0.38.3/src/lib/sync/conversation-sync.ts","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/codexu/note-gen/commit/64e671eb58f56ad6ebec0d99d32f6037f9319979","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/codexu/note-gen/commit/6840c13c4fcb71a79b7df838d19a026830d64b96","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/codexu/note-gen/issues/1296","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/notegen-through-0.38.3-local-file-disclosure-via-chat-image-analysis","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112274","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112274 — libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allow…","description":"libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL terminators. Attackers can feed raw SOA RDATA without a zero byte to applications using the buffer constructor, causing…","indicators":{"cves":["CVE-2026-112274"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:05.223Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/mfontanini/libtins","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/mfontanini/libtins/blob/v4.6/src/dns.cpp#L698-L710","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/libtins-dns-name-parsing-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libtins-through-4.6-out-of-bounds-read-via-dns-soa-record-init","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libtins-dns-name-parsing-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112284","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112284 — libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR()…","description":"libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the 78-entry kLatinSpecialTable without an upper bound check. Attackers can supply crafted captions designating the Latin special set with ESC 28 4C followed by bytes 0x6F-0x7E to lea…","indicators":{"cves":["CVE-2026-112284"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:06.687Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/xqq/libaribcaption/blob/v1.1.2/src/decoder/b24_conv_tables.hpp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xqq/libaribcaption/blob/v1.1.2/src/decoder/decoder_impl.cpp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/xqq/libaribcaption/commit/9917cb311c93d884cb820d122911a211042da26c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://hackmd.io/@haindpwn/libaribcaption-latin-special-table-oob-read","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://www.vulncheck.com/advisories/libaribcaption-1.1.0-through-1.1.2-out-of-bounds-read-via-decoderimpl-handleglgr","label":"disclosure@vulncheck.com","domainType":"other"},{"url":"https://hackmd.io/@haindpwn/libaribcaption-latin-special-table-oob-read","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112288","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112288 — Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users…","description":"Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re…","indicators":{"cves":["CVE-2026-112288"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:07.287Z","fetchedAt":"2026-10-20T03:01:48.464Z","references":[{"url":"https://github.com/krayin/laravel-crm/blob/v2.2.6/packages/Webkul/Automation/src/Services/WebhookService.php","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/commit/64b9125f33a7eb2ef9916d0e5fd8215c7f6a8c28","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/pull/2683","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://github.com/krayin/laravel-crm/releases/tag/v2.2.7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/krayin-crm-2.2.5-before-2.2.7-ssrf-filter-bypass-via-dns-rebinding","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112157","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112157 — A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted elemen…","description":"A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Memory/src/server/http.ts of the component Memory Service. This manipulation causes resource consumption. Remote exploitation of the attack is possible.…","indicators":{"cves":["CVE-2026-112157"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:05.740Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/MemTensor/memmy-agent/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/MemTensor/memmy-agent/issues/468","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112157","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/1014862","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422276","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422276/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112193","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112193 — A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of th…","description":"A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserForm.php. Performing a manipulation of the argument Password results in weak password requirements. Remote exploitation o…","indicators":{"cves":["CVE-2026-112193"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:14.340Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/KaranParelkar/Auresus_vulnerability/blob/main/Weak%20Password%20Policy/Readme.md","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112193","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/973095","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422296","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422296/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12660","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-12660 — IBM MQ Web Console could allow an authenticated administrator to write files outside the intended di…","description":"IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation.","indicators":{"cves":["CVE-2026-12660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:18.440Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12669","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-12669 — IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malf…","description":"IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejected.","indicators":{"cves":["CVE-2026-12669"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:19.110Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292667","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-1501","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-1501 — IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.","description":"IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.","indicators":{"cves":["CVE-2026-1501"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:06.703Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-3303","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-3303 — IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacke…","description":"IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.","indicators":{"cves":["CVE-2026-3303"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:07.387Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.ibm.com/support/pages/node/7292374","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112249","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-112249 — A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw…","description":"A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Product/Product.Layout.Simple.cshtml of the component Product Description Handler. The manipulation results in cross site scripting. The attack can be launched remo…","indicators":{"cves":["CVE-2026-112249"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:26.760Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/grandnode/grandnode2/","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/commit/41a8e349eab8d9641cf6ea800d738f2d8991ca22","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/pull/780","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/releases/tag/2.4.0-beta","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://github.com/grandnode/grandnode2/security/advisories/GHSA-cvpg-48r9-fq67","label":"cna@vuldb.com","domainType":"primary"},{"url":"https://vuldb.com/cve/CVE-2026-112249","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/submit/986350","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422323","label":"cna@vuldb.com","domainType":"other"},{"url":"https://vuldb.com/vuln/422323/cti","label":"cna@vuldb.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111766","source":"nvd","category":"vulnerability","severity":"low","title":"CVE-2026-111766 — markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark pre…","description":"markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled Markdown containing repeated unterminated inline HTML comments, processing instructions, declarations, or CDATA sections…","indicators":{"cves":["CVE-2026-111766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:52.247Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/markdown-it/markdown-it/commit/928bc8c11ded60181c0e7fc5aa954eec582e8e79","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/commit/d99f48839d37af6fd8a2617516c43dab90755503","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/14.3.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/releases/tag/15.0.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/markdown-it/markdown-it/security/advisories/GHSA-vfgh-jcmw-g37q","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-key-practices-for-incident-readiness-and-response-in-super-intelligence-training","source":"cisa-advisories","category":"advisory","severity":"unknown","title":"Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation","description":"The National Institute of Standards and Technology (NIST), National Security Agency’s Super Intelligence Security Center (NSA SISC) and Cybersecurity and Infrastructure Security Agency (CISA) published Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation. T…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.451Z","references":[{"url":"https://www.cisa.gov/resources-tools/resources/key-practices-incident-readiness-and-response-super-intelligence-training-and-evaluation","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-cisa-urges-patching-critical-vulnerability-in-beyondtrust-remote-support","source":"cisa-advisories","category":"advisory","severity":"unknown","title":"CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support","description":"CISA is aware of critical authentication bypass vulnerability CVE-2026-102764, affecting BeyondTrust Remote Support (formerly Bomgar) versions 26.2.3 and earlier. Patches are available for supported versions (24.3.1 and later); organizations using older versions must upgrade first. Cyber threat acto…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.451Z","references":[{"url":"https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-urges-patching-critical-vulnerability-beyondtrust-remote-support","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-cisa-adds-two-known-exploited-vulnerabilities-to-catalog","source":"cisa-advisories","category":"advisory","severity":"unknown","title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","description":"CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability\nCVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability \nTh…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-adds-two-known-exploited-vulnerabilities-catalog","label":"CISA Advisory","domainType":"primary"},{"url":"https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-adds-two-known-exploited-vulnerabilities-catalog","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-cisa-adds-one-known-exploited-vulnerability-to-catalog","source":"cisa-advisories","category":"advisory","severity":"unknown","title":"CISA Adds One Known Exploited Vulnerability to Catalog","description":"CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability \nThis type of vulnerability is a frequent attack vector fo…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/alerts/2026/10/15/cisa-adds-one-known-exploited-vulnerability-catalog","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"cisa-adv-cisa-adds-four-known-exploited-vulnerabilities-to-catalog","source":"cisa-advisories","category":"advisory","severity":"unknown","title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","description":"CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \nCVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability \nCVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability\nCVE-2026-1051…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T12:00:00.000Z","fetchedAt":"2026-10-20T03:00:00.452Z","references":[{"url":"https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","label":"CISA Advisory","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109758","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109758 — Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer…","description":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installer…","indicators":{"cves":["CVE-2026-109758"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T04:17:14.843Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://portal.perforce.com/s/cve/a91Qi000003GITtIAO/unauthenticated-rce-via-prototype-pollution-in-helix-authentication-service","label":"security@puppet.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75826","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-75826 — Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 bef…","description":"Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authentica…","indicators":{"cves":["CVE-2026-75826"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:16:32.573Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++","label":"001d69cf-3fc9-4203-93fb-9865b54e05b2","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101020","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101020 — An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD,…","description":"An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticated attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running m…","indicators":{"cves":["CVE-2026-101020"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:13.257Z","fetchedAt":"2026-10-20T03:01:48.431Z","references":[{"url":"https://jvn.jp/en/jp/JVN38664315/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://www.hammock.jp/assetview/info/261013.html","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96535","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-96535 — Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting…","description":"Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of sanitisation and validation of SVG content when setting an SVG image containing embedded JavaScript code as the avatar. The file i…","indicators":{"cves":["CVE-2026-96535"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:17:22.260Z","fetchedAt":"2026-10-20T03:01:48.432Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-youmind-web-application","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109162","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109162 — Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploa…","description":"Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/user_upload/ instead of the configured destination. This could cause uploaded files to end up in a publicly accessible storage even though a restricted, non-…","indicators":{"cves":["CVE-2026-109162"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T10:17:15.463Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://github.com/TYPO3/typo3/commit/cc3e8e28b0e830aaf6ad857272f3f2dc3c4ede12","label":"f4fb688c-4412-4426-b4b8-421ecf27b14a","domainType":"primary"},{"url":"https://github.com/TYPO3/typo3/commit/f536f75c6bd3456165e4200e5df1b236ddeae3b0","label":"f4fb688c-4412-4426-b4b8-421ecf27b14a","domainType":"primary"},{"url":"https://news.typo3.com/security/advisory/typo3-core-sa-2026-024","label":"f4fb688c-4412-4426-b4b8-421ecf27b14a","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63316","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-63316 — A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input p…","description":"A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into \"in\" and \"not_in\" query paramethers allows an authenticated attacker to perform SQL Injection attacks.\n\nThis issue was fixed in version 3.90.0 and 4.0.0-canary.34.","indicators":{"cves":["CVE-2026-63316"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:17:14.473Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://cert.pl/posts/2026/10/CVE-2026-63316","label":"cvd@cert.pl","domainType":"other"},{"url":"https://github.com/payloadcms/payload/security/advisories/GHSA-pj7x-6wpf-pgvp","label":"cvd@cert.pl","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109763","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109763 — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firef…","description":"Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109763"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:27.150Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2072501","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109772","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109772 — Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and…","description":"Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109772"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.090Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2066063","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109774","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109774 — Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixe…","description":"Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.293Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2067657","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109780","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109780 — Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and…","description":"Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.","indicators":{"cves":["CVE-2026-109780"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:28.917Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2072775","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-106/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109782","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109782 — Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5…","description":"Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-109782","CVE-2026-109783"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T13:17:29.117Z","fetchedAt":"2026-10-20T03:01:48.433Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2067465","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-108/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2075533","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-58771","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-58771 — AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” b…","description":"AMI APTIOV contains vulnerabilities in BIOS\nwhere users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, and Availabil…","indicators":{"cves":["CVE-2025-58771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:18.140Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf","label":"biossecurity@ami.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-58772","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-58772 — AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local…","description":"AMI APTIOV contains vulnerabilities in BIOS where users may cause \n“Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.","indicators":{"cves":["CVE-2025-58772"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:18.327Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf","label":"biossecurity@ami.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-58773","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-58773 — AMI APTIOV contains vulnerabilities in BIOS where users may cause \"Out-of-bounds Write” by local acc…","description":"AMI APTIOV contains vulnerabilities in BIOS where users may cause  \"Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.","indicators":{"cves":["CVE-2025-58773"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:18.460Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf","label":"biossecurity@ami.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-58774","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-58774 — AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Leng…","description":"AMI APTIOV contains vulnerabilities\nin BIOS where users may cause “Buffer Access with Incorrect Length\nValue” by local access. Successful exploitation of this vulnerability could\nlead to buffer overflows, memory corruption, and arbitrary code execution, and\nalso impact Confidentiality, Integrity, an…","indicators":{"cves":["CVE-2025-58774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:18.580Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf","label":"biossecurity@ami.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-0893","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0893 — AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Infor…","description":"AMI APTIOV contains a vulnerability in BIOS\nwhere an attacker may cause “Exposure of Sensitive\nInformation to an Unauthorized Actor” by local access. Successful\nexploitation of this vulnerability can lead to information disclosure,\nprivilege escalation, and further impact on Confidentiality, Integri…","indicators":{"cves":["CVE-2026-0893"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:17:18.747Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026002.pdf","label":"biossecurity@ami.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102250","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102250 — CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modifi…","description":"CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.","indicators":{"cves":["CVE-2026-102250"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:29.940Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-286-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-286-02.pdf","label":"cybersecurity@se.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102603","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102603 — Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prio…","description":"Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint (POST /current/user/password) accepts a valid client token without requiring the account's current password or another elevated authentication step. An attacke…","indicators":{"cves":["CVE-2026-102603"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:30.383Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/gotify/server/commit/a8744482c668e07a61798573ec8e17bd3f6009f9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gotify/server/pull/952","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gotify/server/releases/tag/v3.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gotify/server/security/advisories/GHSA-3hcj-9m7p-wwm9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/gotify/server/security/advisories/GHSA-3hcj-9m7p-wwm9","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-106108","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-106108 — Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 unt…","description":"Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages() could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent travers…","indicators":{"cves":["CVE-2026-106108"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:31.260Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/quasarframework/quasar/commit/cdd4daeec839215540221122763c7a17cd478abc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/quasarframework/quasar/releases/tag/@quasar/app-vite-v3.3.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/quasarframework/quasar/security/advisories/GHSA-vhhq-m2gm-rwc9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-107460","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107460 — Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (In…","description":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's…","indicators":{"cves":["CVE-2026-107460"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:31.657Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://cve.org/CVERecord?id=CVE-2026-49328","label":"security@apache.org","domainType":"other"},{"url":"https://github.com/apache/fesod/pull/1035","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/fesod/releases/tag/2.1.0-incubating","label":"security@apache.org","domainType":"primary"},{"url":"https://lists.apache.org/thread/oh706yhm32hmw8vx4kh1948h952pfr83","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-12655","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-12655 — A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change t…","description":"A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in admin account takeover or unauthorized modification of device configuration.","indicators":{"cves":["CVE-2026-12655"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:43.820Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1801.html","label":"PSIRT@rockwellautomation.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-12656","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-12656 — A denial-of-service security issue exists in the affected product and version. The security issue st…","description":"A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its n…","indicators":{"cves":["CVE-2026-12656"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:43.967Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1801.html","label":"PSIRT@rockwellautomation.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-18228","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-18228 — HyperScale contained a path traversal issue affecting information disclosure. Software customers upg…","description":"HyperScale contained a path traversal issue affecting information disclosure.  Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents.","indicators":{"cves":["CVE-2026-18228"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:44.103Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_8.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-4869","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-4869 — A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier w…","description":"A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure location. If a local administrator launches a compressed Setup.exe with Prerequisites from an unsecured location, the Prerequ…","indicators":{"cves":["CVE-2026-4869"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:44.480Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://community.revenera.com/s/article/CVE-2026-4869-Potential-Privilege-Escalation-in-InstallShield-2025-R2-running-Setup-Prerequisites-from-an-insecure-directory","label":"PSIRT-CNA@flexerasoftware.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77090","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77090 — CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosur…","description":"CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.  Software customers upgrade to resolved maintenance release. Update CVFS.","indicators":{"cves":["CVE-2026-77090"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:48.887Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_07_4.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77093","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77093 — CvFWD contained an integer overflow affecting service availability. Software customers upgrade to re…","description":"CvFWD contained an integer overflow affecting service availability.  Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale","indicators":{"cves":["CVE-2026-77093"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:49.017Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_2.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77094","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77094 — CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to…","description":"CvFWD contained an out-of-bounds write affecting service availability.  Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and…","indicators":{"cves":["CVE-2026-77094"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:49.143Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_1.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77095","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77095 — CvFWD contained a null pointer dereference affecting service availability. Software customers upgrad…","description":"CvFWD contained a null pointer dereference affecting service availability.  Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.","indicators":{"cves":["CVE-2026-77095"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:49.273Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_5.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77096","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77096 — CVFS contained a missing authentication condition affecting command execution. Software customers up…","description":"CVFS contained a missing authentication condition affecting command execution.  Software customers upgrade to resolved maintenance release. Update CVFS.","indicators":{"cves":["CVE-2026-77096"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:49.400Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_7.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77099","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77099 — CVFS contained an input validation issue affecting command execution. Software customers upgrade to…","description":"CVFS contained an input validation issue affecting command execution.  Software customers upgrade to resolved maintenance release. Update CVFS.","indicators":{"cves":["CVE-2026-77099"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:49.530Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_9.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-77100","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77100 — MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software cus…","description":"MediaAgent contained a heap-based buffer overflow issue affecting service availability.  Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.","indicators":{"cves":["CVE-2026-77100"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:49.650Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_6.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-95117","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-95117 — Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a d…","description":"Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components","indicators":{"cves":["CVE-2026-95117"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:51.430Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://gist.github.com/1820893135-pixel/905399dd927376f7d655e6b01067fd8e","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/zserge/jsmn/issues/249","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/zserge/jsmn/pull/250","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/zserge/jsmn/pull/250/changes/320e3348d22a819be95b755af39cd35097707ad0","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95127","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-95127 — An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outlin…","description":"An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c","indicators":{"cves":["CVE-2026-95127"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:51.920Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://gist.github.com/1820893135-pixel/5aee1e778240351c744ce5496eef3285","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/libass/libass/issues/947","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/libass/libass/pull/955","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/libass/libass/pull/955/changes/d570c2f5ed55844ec9b77b085deb3cb8ef59cb4a","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97333","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-97333 — QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgr…","description":"QAPI contained a stack-based buffer overflow affecting service availability.  Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.","indicators":{"cves":["CVE-2026-97333"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:52.160Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_4.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97334","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-97334 — The network messaging layer contained improper handling of highly compressed data affecting service…","description":"The network messaging layer contained improper handling of highly compressed data affecting service availability.  Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperSc…","indicators":{"cves":["CVE-2026-97334"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T15:17:52.300Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_10_3.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101899","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101899 — Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios sh…","description":"Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NO_PROXY CIDR form as a textual hostname suffix instead of evaluating the network range. A request targets an address covered by a CIDR entry in NO_PROXY while a proxy is co…","indicators":{"cves":["CVE-2026-101899"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:09.173Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/axios/axios/commit/d19040bda7a8be2f82c3c6e1a5bc03917daee39a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/axios/axios/pull/11141","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/axios/axios/releases/tag/v1.20.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102699","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102699 — [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabiliti…","description":"[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing caches through\n   GNTTABOP_cache_flush.  Unfortunately the fix…","indicators":{"cves":["CVE-2026-102699","CVE-2026-102702"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:09.510Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-519.html","label":"security@xen.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102700","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102700 — With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-1…","description":"With its original introduction, GNTTAB_cache_flush was made available\nuniformly.  XSA-232 (CVE-2017-14318) then covered an omitted NULL\npointer check, yet the addition of that check failed to adjust the\nsubsequent error path.  That error path fails to drop a page reference in\ncase the specified page…","indicators":{"cves":["CVE-2026-102700"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:09.623Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-520.html","label":"security@xen.org","domainType":"other"},{"url":"http://xenbits.xen.org/xsa/advisory-520.html","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102982","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102982 — Plane is an open-source project management tool. Prior to 1.4.0, the plane comments fail to sanitize…","description":"Plane is an open-source project management tool. Prior to 1.4.0, the plane comments fail to sanitize unsafe URL schemes stored in comment_html. A project member can store a crafted link in a comment, and attacker-controlled script executes in the browser context of another user who selects the link.…","indicators":{"cves":["CVE-2026-102982"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:10.293Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/makeplane/plane/commit/0d58adb69d859fc94c43b9d68fadd77e810d5ed1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/pull/9287","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/releases/tag/v1.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-6qrq-f73q-r67j","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/makeplane/plane/security/advisories/GHSA-6qrq-f73q-r67j","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103928","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103928 — Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16,…","description":"Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or acti…","indicators":{"cves":["CVE-2026-103928"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:10.597Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/metabase/metabase/commit/8fb4f0c8a22f195390b4a1d8f5c21db695ae8cc3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/commit/a943448e90e23dbb78001ddedbb15e9c0794473c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/commit/abf3fb8427eccefd8d46149cdebe38f3b49f964f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/commit/ae60d1cd156d097f084af43a536b3ab60510c9a4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/commit/e231432adcc813a75f3ca4832818bda2d9d265da","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/releases/tag/v0.58.15.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/releases/tag/v0.59.12.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/releases/tag/v0.60.8.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/releases/tag/v0.61.3.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/metabase/metabase/security/advisories/GHSA-cwxq-fmxq-jv8h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-54697","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-54697 — ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.…","description":"ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the remaining…","indicators":{"cves":["CVE-2026-54697","CVE-2026-54700"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:21.297Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/connectbot/cbssh/commit/2bb917517bec0df229a02ca768d6eae84be72df0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/connectbot/cbssh/releases/tag/v0.3.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/connectbot/cbssh/security/advisories/GHSA-vc8p-8pxg-rfwg","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/connectbot/cbssh/commit/a08421fbe7cf8b72fa60fb8b2f98fb465dc43fd9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/connectbot/cbssh/pull/194","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/connectbot/cbssh/security/advisories/GHSA-ch3q-cw5r-f4hg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-69150","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-69150 — KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe…","description":"KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in m_entryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream e…","indicators":{"cves":["CVE-2026-69150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:22.327Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://github.com/keepassxreboot/keepassxc/commit/6a534f38c61295d60b0e937739a12511e76dbfeb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/keepassxreboot/keepassxc/releases/tag/2.8.0-beta1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-4642-49vv-4p43","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-79608","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79608 — The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with o…","description":"The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later\nre-worked to better integrate with other manipulations of the same MSR.\nIn this rework an inverted conditional was introduced, resulting in the\nworkaround to not be applied when needed and vice versa.\n\nFor more details, see:\n  http://xe…","indicators":{"cves":["CVE-2026-79608"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:23.040Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-515.html","label":"security@xen.org","domainType":"other"},{"url":"http://xenbits.xen.org/xsa/advisory-515.html","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79609","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79609 — XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XS…","description":"XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown\n(CVE-2017-5754, one aspect of XSA-254).  This involves copying 64-bit PV\nguest page table entries from guest-chosen root page tables to the Xen-\nchosen one which is in actual use by hardware.  To read the guest root\npage table, the…","indicators":{"cves":["CVE-2026-79609"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:23.147Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-516.html","label":"security@xen.org","domainType":"other"},{"url":"http://xenbits.xen.org/xsa/advisory-516.html","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79610","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79610 — XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operati…","description":"XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain\nother grant table operations.  Sadly a v2 -> v1 -> v2 change has yet\nanother effect which wasn't accounted for: During the first change, status\npages would be freed.  During the second change they would be allocated\nagain.  H…","indicators":{"cves":["CVE-2026-79610"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:23.247Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-517.html","label":"security@xen.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/13/6","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"http://xenbits.xen.org/xsa/advisory-517.html","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79611","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79611 — For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state w…","description":"For XSA-308 logic was introduced, as VMX VMEntry checks do not like the\nexact combination of state which occurs when #DB in intercepted, Single\nStepping is active, and blocked by STI/MovSS is active, despite this being\na legitimate state to be in.  The resulting VMEntry failure is fatal to\nthe guest…","indicators":{"cves":["CVE-2026-79611"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:23.347Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-518.html","label":"security@xen.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/13/7","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"http://xenbits.xen.org/xsa/advisory-518.html","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88836","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-88836 — Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox i…","description":"Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with th…","indicators":{"cves":["CVE-2026-88836"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T16:17:23.960Z","fetchedAt":"2026-10-20T03:01:48.434Z","references":[],"feedLabel":null},{"id":"nvd-CVE-2026-53562","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-53562 — Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. Thi…","description":"Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.\n\nThis issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.","indicators":{"cves":["CVE-2026-53562"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:41.147Z","fetchedAt":"2026-10-20T03:01:48.435Z","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697187","label":"secure@citrix.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55823","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-55823 — Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in report…","description":"Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database execution path, allowing crafted report input to alter SQL executed by the application. This issue is fixed in version 16.23…","indicators":{"cves":["CVE-2026-55823"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:42.390Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/frappe/frappe/commit/49dbde7460fa41528154088d23b6c6e12f733f9b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/commit/f4f2df926e3c2db2da5fc79983f285397c028690","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/pull/40022","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/pull/40027","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/releases/tag/v16.23.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/security/advisories/GHSA-mf6r-q34j-pjw7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-66057","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-66057 — Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flo…","description":"Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fixed…","indicators":{"cves":["CVE-2026-66057"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T17:17:44.810Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://github.com/frappe/frappe/commit/12568e2d54c4abba70bc0261387053fa28f90988","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/commit/1e0a3b941231d74a71ff1a43eee2e9f63c88712d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/commit/6ed8acd869199feb3a2598887d471448297edf07","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/pull/40962","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/releases/tag/v15.116.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/releases/tag/v16.29.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/frappe/frappe/security/advisories/GHSA-78c5-55xg-jm7m","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104011","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104011 — Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason:…","description":"Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason: This candidate is a reservation duplicate of CVE-2026-94257. Notes: All CVE users should reference CVE-2026-94257 instead of this candidate. All references and descriptions in this candidate have been…","indicators":{"cves":["CVE-2026-104011","CVE-2026-103910"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:12.643Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[],"feedLabel":null},{"id":"nvd-CVE-2026-105445","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105445 — An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion f…","description":"An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then auth…","indicators":{"cves":["CVE-2026-105445"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:17:13.167Z","fetchedAt":"2026-10-20T03:01:48.436Z","references":[{"url":"https://docs.docker.com/accounts/organization/setup/convert-account/","label":"security@docker.com","domainType":"other"},{"url":"https://ghostpat.com/","label":"security@docker.com","domainType":"other"},{"url":"https://www.docker.com/blog/docker-hub-security-advisory-cve-2026-105445/","label":"security@docker.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103937","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103937 — Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025…","description":"Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. Repeated uploads can exhaust storage or file descriptors and deny service regardless of whether federation is enabled. This…","indicators":{"cves":["CVE-2026-103937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:54.387Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/misskey-dev/misskey/commit/3f28489fb856e6e07a16290f3ea1e1261572b527","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/pull/17750","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/releases/tag/2026.7.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/security/advisories/GHSA-m9xp-2fvm-pfmq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104817","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104817 — Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauth…","description":"Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing, exhau…","indicators":{"cves":["CVE-2026-104817"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:55.697Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://github.com/misskey-dev/misskey/commit/a12ee2e5d72c40252e11a164b2231667c9697667","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/releases/tag/2026.7.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/misskey-dev/misskey/security/advisories/GHSA-4x7v-qx8f-g3p8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104937","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104937 — Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/htm…","description":"Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS). When a malicious uploaded file containing an embedded JavaScript payload is viewed by an administrator, the attacker c…","indicators":{"cves":["CVE-2026-104937"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:17:56.030Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://kb.cert.org/vuls/id/157374","label":"cret@cert.org","domainType":"other"},{"url":"https://www.kb.cert.org/vuls/id/157374","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110247","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110247 — Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow ch…","description":"Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data acro…","indicators":{"cves":["CVE-2026-110247"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.493Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2071621","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110249","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110249 — A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP re…","description":"A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5.","indicators":{"cves":["CVE-2026-110249"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:18:49.590Z","fetchedAt":"2026-10-20T03:01:48.437Z","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2077826","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-109/","label":"security@mozilla.org","domainType":"other"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-110/","label":"security@mozilla.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75120","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-75120 — The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™…","description":"The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activit…","indicators":{"cves":["CVE-2026-75120"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:19:53.390Z","fetchedAt":"2026-10-20T03:01:48.438Z","references":[{"url":"https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0872887","label":"security@opentext.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84994","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84994 — Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/c…","description":"Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes ResourceSerializer.$fill$ to pass resource._resolved to Promise.resolve without first rejecting attacker-controlled thenables. A…","indicators":{"cves":["CVE-2026-84994"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:20:52.743Z","fetchedAt":"2026-10-20T03:01:48.439Z","references":[{"url":"https://github.com/QwikDev/qwik/commit/c1e7444402f9592b5cf9096e10bf303ab4640511","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/QwikDev/qwik/pull/8655","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/QwikDev/qwik/releases/tag/@builder.io/qwik@1.20.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/QwikDev/qwik/security/advisories/GHSA-x586-xvc8-g7q6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-86063","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86063 — Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin i…","description":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git h…","indicators":{"cves":["CVE-2026-86063"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:21.417Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://github.com/anthropics/claude-code/releases/tag/v2.1.179","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anthropics/claude-code/security/advisories/GHSA-pq7j-f95f-qfcv","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-92088","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-92088 — Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege…","description":"Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.\n\nThis issue affects upKeeper Instant Privilege Access: through 1.7.1.","indicators":{"cves":["CVE-2026-92088"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T19:21:43.250Z","fetchedAt":"2026-10-20T03:01:48.440Z","references":[{"url":"https://support.upkeeper.se/hc/en-us/articles/31019905229084-CVE-2026-92088-Improper-handling-of-undefined-values","label":"80f39f49-2521-4ee7-9e17-af5d55e8032f","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110005","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110005 — The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS co…","description":"The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed…","indicators":{"cves":["CVE-2026-110005"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:25.660Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/moghtech/komodo","label":"cret@cert.org","domainType":"primary"},{"url":"https://www.kb.cert.org/vuls/id/456950","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16753","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-16753 — Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and inclu…","description":"Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-que…","indicators":{"cves":["CVE-2026-16753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:17:28.630Z","fetchedAt":"2026-10-20T03:01:48.441Z","references":[{"url":"https://github.com/lowcoder-org/lowcoder","label":"cret@cert.org","domainType":"primary"},{"url":"https://www.kb.cert.org/vuls/id/382143","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84419","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84419 — Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace…","description":"Out-of-bounds write vulnerability in Citrix Workspace app for Windows.\n\nThis issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.","indicators":{"cves":["CVE-2026-84419"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:18:58.643Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697181","label":"secure@citrix.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84420","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84420 — Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citr…","description":"Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.\n\nThis issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.","indicators":{"cves":["CVE-2026-84420"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:18:58.800Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697181","label":"secure@citrix.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84790","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84790 — OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a craft…","description":"OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field","indicators":{"cves":["CVE-2026-84790"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T22:18:58.937Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://community.openvpn.net/Security%20Announcements/CVE-2026-84790","label":"security@openvpn.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104922","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104922 — Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","description":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","indicators":{"cves":["CVE-2026-104922","CVE-2026-105142","CVE-2026-105151","CVE-2026-105627","CVE-2026-106006","CVE-2026-106068","CVE-2026-106485","CVE-2025-3778","CVE-2026-107172","CVE-2026-107316","CVE-2026-2937","CVE-2026-5819","CVE-2026-8311","CVE-2026-106549","CVE-2026-107346","CVE-2026-105391","CVE-2026-107274","CVE-2026-107345","CVE-2026-107772","CVE-2026-108117","CVE-2026-98654","CVE-2026-108519","CVE-2026-77225","CVE-2026-77227","CVE-2026-77228","CVE-2026-56714","CVE-2026-57512","CVE-2026-57513","CVE-2026-57514","CVE-2026-57515","CVE-2026-57519","CVE-2026-57526","CVE-2026-57528","CVE-2026-57529"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T23:17:25.113Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[],"feedLabel":null},{"id":"nvd-CVE-2026-105390","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105390 — Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.…","description":"Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.","indicators":{"cves":["CVE-2026-105390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T23:17:26.470Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://community.openvpn.net/Security%20Announcements/CVE-2026-105390","label":"security@openvpn.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-15468","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-15468 — Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allow…","description":"Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.\n\nThis issue affects HYPR Passwordless: before 11.3.3.","indicators":{"cves":["CVE-2026-15468"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T23:17:32.437Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.hypr.com/trust-center/security-advisories","label":"security@hypr.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53563","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-53563 — Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS…","description":"Vulnerability in Citrix UniconOS leading to Persistent Command Execution\n\nThis issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.","indicators":{"cves":["CVE-2026-53563"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T23:17:32.883Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697187","label":"secure@citrix.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53564","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-53564 — Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconO…","description":"Vulnerability in Citrix UniconOS leading to Arbitrary file read and write\n\nThis issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.","indicators":{"cves":["CVE-2026-53564"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T23:17:33.007Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697187","label":"secure@citrix.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88964","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-88964 — An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remot…","description":"An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options","indicators":{"cves":["CVE-2026-88964"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T23:19:13.687Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://community.openvpn.net/Security%20Announcements/CVE-2026-88964","label":"security@openvpn.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108473","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108473 — Multiple Kasa devices contain an improper authentication vulnerability in the local device-managemen…","description":"Multiple\nKasa devices contain an improper authentication vulnerability in the local\ndevice-management protocol. An unauthenticated adjacent attacker may send\nmanagement instructions to an affected device without adequate authentication\nor authorization, allowing modification of the device state or m…","indicators":{"cves":["CVE-2026-108473"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T01:17:06.030Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://www.tp-link.com/en/support/download/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/download/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5342/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106931","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-106931 — SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker…","description":"SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.","indicators":{"cves":["CVE-2026-106931"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T05:16:42.633Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://jvn.jp/en/jp/JVN88474777/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://www.eg-secure.co.jp/siteguard/news/alert-202610-1","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107153","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107153 — Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verif…","description":"Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a crafted system image may be installed.","indicators":{"cves":["CVE-2026-107153"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T06:17:05.390Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://jvn.jp/en/jp/JVN47427200/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-big-s/support/index.html","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand-5g/support/index.html","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-hand/support/index.html","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://network.mobile.rakuten.co.jp/product/smartphone/rakuten-mini/support/index.html","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-94370","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-94370 — A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application…","description":"A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ow…","indicators":{"cves":["CVE-2026-94370"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T06:17:07.070Z","fetchedAt":"2026-10-20T03:01:48.442Z","references":[{"url":"https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-94370:","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107171","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107171 — An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads…","description":"An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.","indicators":{"cves":["CVE-2026-107171"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:17:04.100Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://support.trellix.com/s/article/000015866","label":"trellixpsirt@trellix.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103671","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103671 — External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 se…","description":"External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) \"AmazonPay Plugin\". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.","indicators":{"cves":["CVE-2026-103671"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T09:17:22.030Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://jvn.jp/en/jp/JVN43511918/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://www.ec-cube.net/news/detail.php?news_id=490","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14851","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-14851 — A vulnerability relating to the exposure of confidential information in the customer invoicing web a…","description":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised ind…","indicators":{"cves":["CVE-2026-14851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T09:17:22.437Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/unauthorised-disclosure-information-coparts-online-billing-service","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101337","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101337 — When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated t…","description":"When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data.  Zone files which are written out by NSD itself, such as for zones for which the NSD instan…","indicators":{"cves":["CVE-2026-101337"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:56.890Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101337.txt","label":"sep@nlnetlabs.nl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101338","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101338 — When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may o…","description":"When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size.  Zone files which are written out by NSD itself, such as for zones for which the…","indicators":{"cves":["CVE-2026-101338"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:57.130Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101338.txt","label":"sep@nlnetlabs.nl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101339","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101339 — A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a…","description":"A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker controlled data.  Zone files which are written out by NSD itself, such as for zones for which the NSD instance is secon…","indicators":{"cves":["CVE-2026-101339"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:57.300Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101339.txt","label":"sep@nlnetlabs.nl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101341","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101341 — Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within t…","description":"Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse.  Zone files which ar…","indicators":{"cves":["CVE-2026-101341"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:16:57.423Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.nlnetlabs.nl/downloads/nsd/CVE-2026-101341.txt","label":"sep@nlnetlabs.nl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107913","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107913 — Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were…","description":"Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudflare WordPress plugin. All CVE users should reference CVE-2026-39749 instead of this ID.","indicators":{"cves":["CVE-2026-107913"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:02.887Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[],"feedLabel":null},{"id":"nvd-CVE-2026-108070","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108070 — A vulnerability involving improper access control in the TSplus Remote Access web server that allows…","description":"A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal re…","indicators":{"cves":["CVE-2026-108070"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:02.977Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tsplus-remote-access","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108071","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108071 — Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA)…","description":"Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation…","indicators":{"cves":["CVE-2026-108071"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:03.113Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tsplus-remote-access","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108072","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108072 — Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autosta…","description":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could…","indicators":{"cves":["CVE-2026-108072"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:17:03.247Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tsplus-remote-access","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-85298","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-85298 — An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runt…","description":"An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project.\n\n\nThis vulnerability was…","indicators":{"cves":["CVE-2026-85298"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T12:17:18.320Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://docs.cloud.google.com/application-integration/docs/security-bulletins#gcp-2026-068","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c","domainType":"other"},{"url":"https://docs.cloud.google.com/support/bulletins#gcp-2026-068","label":"f45cbf4e-4146-4068-b7e1-655ffc2c548c","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98386","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98386 — In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset_io() t…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot\n\nFor QLAFX00 the request ring is ioremapped device I/O memory\n(ha->iobase + req_que_off), not DMA-coherent RAM, which is why the rest\nof the FX00 path accesses it th…","indicators":{"cves":["CVE-2026-98386"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:49.400Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/53eb96c244d150dfb8cc4b5b0492ab53755f3701","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/626e44f3d8a924a97a3848a9fd45833947e081e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6ee6dfd922fafd508f6bde16de30dd2db796b7a7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e41d28d9a242c4005b7d01a7ee7769405a6a2c2e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98387","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98387 — In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk r…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: Fix skcipher_walk return code handling in aes_s390\n\nThe return codes from skcipher_walk_virt() were not properly checked\nbefore entering the processing loops in ecb_aes_crypt() and ctr_aes_crypt().\nIf skcipher_walk_vir…","indicators":{"cves":["CVE-2026-98387"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:49.510Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/15fa028589c3a2545f0bff355eff06d5844196bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/35c3f97569306050e818fa18e17fa97c358f0f28","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/89b58645646d1dac34162cc2597f42266bfbf930","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aea3e1588f08e381a7a57b2bf1a60cc2347904cd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98388","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98388 — In the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nexec: do_close_on_exec() before taking exec_update_lock\n\ndo_close_on_exec() currently happens while holding the exec_update_lock,\nwhich is used in a lot of places that access process state to\nsynchronize access checks.\nI recently a…","indicators":{"cves":["CVE-2026-98388"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:49.617Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/0d86cd6b709c39216e6ee5ea8f0fc4242bbb2b53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/19ddef61ee0a49782a60f8f497e50597ad5de2da","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3feb4020bfb7ccf0d347f27051639d25e19cd65d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/550feab5b01000ab314868b62211fb3ddfd600e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5aacc19ba2b1faf84c4a2f2cf9a1784e03d1ff38","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/63be3d8511bdafa095cd14a393cbf3c58dbbb928","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/955973fff4a36d39a848b00cac1706863f568fe1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e780259b54e618ceb4763fbc21314acf3565e813","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98389","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98389 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_powe…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: skip gfx switch_power_profile during GPU reset\n\nDuring resume from GPU reset, the gfx idle work may invoke switch_power_profile\nbefore the reset completes. This causes the following assert error because the\nregister acc…","indicators":{"cves":["CVE-2026-98389"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:49.760Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/054022c8e74fe9b6cde63e636146b87cfe40f107","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1f1d43418d61c8511779e0f63a954a78b9433b43","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/52947c09c41cfab4d3d802581b9acf8dbc142fc5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98390","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98390 — In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by ze…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/amd_node: Avoid divide by zero on virtualized systems\n\nOn a virtualized system, the number of nodes does not have a relationship to\nthe number of roots.  A Xen PVH dom0 can calculate roots_per_node as 0, which\ncrashes with a di…","indicators":{"cves":["CVE-2026-98390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:49.873Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/72bd92bd8190d7869ecb462649ca40f297822a33","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9273a90465d58b82aca4bea71451ef6bee084928","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/94e984d8858a3228952b02f84e66610961098cc2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98392","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98392 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix tx_…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel_pcie: fix tx_handle bounds off-by-one\n\nValid indices into txq->urbd0s/tfds/bufs are 0..txq->count-1, so\ntfd_index == txq->count is already out of range. Change the guard in\nbtintel_pcie_msix_tx_handle() from '> t…","indicators":{"cves":["CVE-2026-98392"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.083Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/3dd1b41f96aad08444be1b7626c89de2b9f2abd4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/72bbd7c815ef92399b7b109977ae4669ce22ee6e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/932a87444107e6724d808082676bba5c915c98ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a641201a9b4d69ee8a7ef35f7aa597dddee6b9ee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98393","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98393 — In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overfl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv4: Fix UDP length overflow with PMTU discover and big MTU\n\nThis commit bounds cork->base.fragsize to IP_MAX_MTU to avoid a\npossible overflow of UDP length that triggers a WARN in\nudp_set_len_short when setsockopt IP_MTU_DIS…","indicators":{"cves":["CVE-2026-98393"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.193Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/81f540827d243b8dad76c1f44e70ea31719f393c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/83fedc4741210f75be8ca5b487985a242bf6f18d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b83641e0ab8b20eefcc4cdc5a059f897375291a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98394","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98394 — In the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.\n\nFahad Alharbi reported that recv(0, MSG_PEEK) triggers busy-wait\nin unix_stream_read_generic() if recv() is blocking and the last\nskb in the queue is…","indicators":{"cves":["CVE-2026-98394"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.300Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/3d3c7a3df66b2ca3d2cd1a2a0c37eb701feba713","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6e5ee08eb5858d175da6768d75d163817b6a9d4a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c81c5be3826c8467945b964d0cf7f7b3d65461db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d5dd55b316ca229a4cbf11729483ba5bb57233e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98397","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98397 — In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablet…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown\n\nIn gpio_secondary_fwnode_init(), acpi_bus_find_device_by_name() returns a\ndevice reference, but the local dev variable is declared with\n__free(…","indicators":{"cves":["CVE-2026-98397"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.657Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/144113b0a70fa18033a747ee5db6803308f7688c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c62b6e081119f2ab03cfcafde1f83c0f50e8e726","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98398","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98398 — In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stal…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nlocking/lockdep: Invalidate stale class_cache entries for zapped classes\n\nsyzbot reported a lockdep splat hitting DEBUG_LOCKS_WARN_ON(1) in\nhlock_class() due to an invalid class_idx:\n\n  WARNING: kernel/locking/lockdep.c:238 at __lo…","indicators":{"cves":["CVE-2026-98398"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.760Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/02c6be7d675b21d81f0ba3a524346850a8c0e3bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1c9d664e2e067fca69e5a41d68e23bbc66a583fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6bc345f6d81ebe22e0f355c2a21d7e29691f9332","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/baa320fbb2f9fea50f5632a307da8ce84fbef5bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c7acfb04c7e2e2dea248282b21373d93296644dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f63c86e9d267629758adaba18579e784ddd63c32","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f8a1281ab82df5b51fd0384354d4b21daf2b7af0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98399","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98399 — In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block\n\nUnlike kdump, which passes the re-IPL parameter block through os_info,\nthe stand-alone dump passes it through the IPL parm block address and\nchecksum in lowcore.\n\nSo…","indicators":{"cves":["CVE-2026-98399"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:50.893Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/280ff19853440d59e031cd8fe161e81305721262","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/37f61b71cbc0caefc01022a19ee56fc2510e2e6e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/41647864e62b28388ecccc23a82f0e0a091f4ef2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8d7988e8116c3d29d9e02ca9d37ee84577643f2d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aed56fa3108b7095e6a048e134981506c056a6cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98400","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98400 — In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdum…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/ipl: Fix NULL deref in kdump without re-IPL parm block\n\nSome IPL types, like HMC FTP boot or QEMU direct kernel boot, might\nnot provide an IPL parameter block. In this case, reipl_type_init()\nselects IPL_TYPE_UNKNOWN, and reip…","indicators":{"cves":["CVE-2026-98400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.010Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/030e88812435fc5d6aa42eee41fa77b5ea620327","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/50f9c40768e84f30d374235b3ee3850a94d9ac29","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7f918871112e8e7c581e99eb8e545af4e59c8367","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/92d0829eae257544b6b0faccb6e7079c45e22d48","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b6bf82bc5e00afaf836f8bb9a676bffc182a6bbd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98401","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98401 — In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transpo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: iptunnel: fix stale transport header during tunnel decapsulation\n\nSyzbot reported a crash in qdisc_pkt_len_segs_init() caused by a stale\ntransport_header offset after tunnel decapsulation.\n\nBUG: unable to handle page fault for…","indicators":{"cves":["CVE-2026-98401"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.120Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/28a57fb2c5df4deb42a06e52fd36c14b37aa0034","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3340b8565b85631cfeb0df049e8b46e3ef8bd7bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8c3d4dfcecf7670c1d752f1ae74b21b2af5feac1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e4a5b01e59f7102169762b8f566c8e052d05c0ff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98402","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98402 — In the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transpo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: icmp: avoid invalid transport header access in icmp_send tracepoint\n\nsyzbot reported a WARNING triggered by DEBUG_NET_WARN_ON_ONCE():\n\n WARNING: at skb_transport_header include/linux/skbuff.h:3087 [inline]\n WARNING: at udp_hdr…","indicators":{"cves":["CVE-2026-98402"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.257Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/04c0d35bac5122b533672a6775851dfae84e265e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2b32f8c3560905582fb12ed68315a6e606367a6a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7fcc2fe39fed1cb98a7374a113ff3800e8f9af80","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/99654b651c6d5fe865798a2adb859767905f9278","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b972b5e6168dc5d1e13297b1f37f71d6b21cc0f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ec6d4612d1c170e1cef1fe55526471da1e81e777","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98403","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98403 — In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter a…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/boot: Avoid IPL parameter append past command line\n\nA command line may occupy all but the terminating byte of\nCOMMAND_LINE_SIZE. In that case append_ipl_block_parm() passes a zero size\nto the IPL parameter conversion helpers a…","indicators":{"cves":["CVE-2026-98403"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.383Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/73eec5a0d55916d7e1115f5d03a7ffc06d6215cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8d11bfec8666f8409fac9072e9c25b691d3e30ac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/af9866021a00ab9eeacf0c33ee73f3d134b4ed70","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d76181dfabdaa720703167393704efacba343442","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98404","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98404 — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PT…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()\n\nSmatch complains that returning a NULL here will lead to a NULL pointer\ndereference in drm_mode_addfb2().  Return an error pointer instead.","indicators":{"cves":["CVE-2026-98404"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.483Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/07de0b31dd64094cd7d25729beaf2ecae74daa72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3fe8a33715265ecb24ca0bcd0a575c926da4277c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/45dc2788a5b0e1e2824d1f98af521bd3acc340d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5eda6cda0031ba17559d56882353be39e568ec09","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/94579f24e2b526a04eb41050af0ba018c6f528e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/974845d2535a250b180e62f9ed50284f312c01a3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/975f3cf302bb7d7336df4c630a7c07e12780ad10","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f1050a7d365283678b253828739d3866ae546a72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98405","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98405 — In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bou…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix missing iov bounds check in parse_posix_sids()\n\nIn parse_posix_sids(), sidsbuf_end is calculated using the server-supplied\nout_len without being validated against the actual length of the received\niov (iov_len).\n\nI…","indicators":{"cves":["CVE-2026-98405"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.603Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/2f8ed71aaaba3bc8b19cd9930cc62e63e142b299","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b09d092eb24ad0110f16a9b7c1ed5d2a0c1733dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b862996e5105be1293da9cdc85da77b76021c3bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d91b9a3b2b38e5ac1b51e9e5b23fe53ad7b49644","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eac6917a42899aad0617bbf04798c5dd946a1fe5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98406","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98406 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in se…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver\n\nieee80211_set_bitrate_mask() checks if the interface is running via\nieee80211_sdata_running(), but it does not check if the interface is\nstill present in the…","indicators":{"cves":["CVE-2026-98406"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.710Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/0d1700394e9f5d0bd9bebad8d5a50edf983f52fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4095b66acae9893dd13deb39a4331651cb2f822b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/432c8532d5ccc2af77da43ed6ef1c80495a4efe8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4ba86c44b2fcb1c3175caa2456b6d58f483446ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7978dda63d2b109ea9c3f7a096cd1aac6542cd54","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c2cd9c44777cf97be3e35c10b7c2d8f59ebb9306","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c4ee5685af444024e6222ce29f6ed36adc44ffc3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/da2ca406f45a6e21760243152ed8d2e8e72915c2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98407","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98407 — In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rsi: fix heap OOB write on key removal\n\nWhen a key is removed (data == NULL), rsi_hal_load_key() runs:\n\n\tmemset(&set_key[FRAME_DESC_SZ], 0, frame_len - FRAME_DESC_SZ);\n\nset_key is a struct rsi_set_key *, so the subscript is s…","indicators":{"cves":["CVE-2026-98407"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.853Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/00bea3589255603c38766cac4a4d6d36493b2556","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/62d40db89180cfab7a917395f9ffc1dac62b0019","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8dab6ee020b2cd951b670626ba44a95cd4deac3d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ac599cf8edf8aa2dae546f04d3f1849e32c2e738","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b79e2f6585c014c42384f4caa7a37b3e5d26179c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c67fb3b875a83f9ba92afea4036c7b541f77512a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e6c5ed7a98d7bc8b0f7918246f1c90ddb3f79dfa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f4f2852b664c3ff1436785cd11258a0ce25b74b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98408","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98408 — In the Linux kernel, the following vulnerability has been resolved: watchdog: rzv2h: Avoid division…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: rzv2h: Avoid division by zero\n\nclk_get_rate() could return 0.  Avoid a division by zero panic.","indicators":{"cves":["CVE-2026-98408"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:51.990Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/0dd78d9d9b546de08e2ae391541f48cea0a9b842","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6274281c41efa8dd1aa5234c59ad904ff89d7af4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eb14ee406e1d0fbbfb857f0eaa710daa8c2dc30e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98409","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98409 — In the Linux kernel, the following vulnerability has been resolved: watchdog: rtd119x: Avoid divisio…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: rtd119x: Avoid division by zero\n\nclk_get_rate() could return 0.  Avoid a division by zero panic.","indicators":{"cves":["CVE-2026-98409"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:52.100Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/1f22001b34984350844d629862f70934770cb796","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5af7d2cbd20f893def03c8310a460ade66a5d822","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/757c721545b9ffac5c3042a0cd3685ea28af7e81","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8a12e049d517d7dee78500633f8f0e47262a67e0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b4ede87765a2e58ca4f18f5f8037c4826b9cc93f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98410","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98410 — In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/re…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog\n\nda9063_wdt_suspend() and da9063_wdt_resume() only check watchdog_active(),\nwhen the watchdog is left running by the driver sets\nWDOG_HW_RUNNING in da9063_wdt_pro…","indicators":{"cves":["CVE-2026-98410"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:52.207Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/1c42e39b0990371b9d76ae22c3f33eb6df341251","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1db134d0d2a51a136296584854570e5e04adedb0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7cb575b71ab98194d2e040bded3a7281e089c5ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/95adc37f47cdf5a5285f7163b24243680af510be","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/960d1c85381bcaae866dd799b1c905ec5d39ebce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c30b419c7e6fbe31c48a44c828174168b732dc5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98411","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98411 — In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-poin…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\npower: sequencing: fix NULL-pointer dereference in pwrseq_device_register()\n\nIf dev_set_name() fails in pwrseq_device_register(), we jump to the\nerr_put_pwrseq label before initializing pwrseq->targets.\npwrseq_release() will try to…","indicators":{"cves":["CVE-2026-98411","CVE-2026-98412"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:52.323Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/242da4318d97380741516b595af3920207b2f0f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a2890c1eb96d1dd0bec1cce5fbc4ed5af1dfd55d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a2fb51ec8920279e9e908010f37b448775f42eff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/efe21a5c5bfe23bd30a8e4ba4e2b04ae265348bb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/115b303e8e093d964089ec6f3c40d984d77b33d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/29e03670cc384561a2037c69b0a1cc5232d3c6c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6e571aea60de7f4c62b77510495d1bcc7df406a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/859880b07a75c7a29d141abfacbd750d25a8e920","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98413","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98413 — In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decisio…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: always fill AVC decision in avc_has_perm_noaudit()\n\navc_has_perm_noaudit() is documented to return a copy of the access\ndecision in @avd, but its early return for an empty requested permission\nset leaves the buffer untouch…","indicators":{"cves":["CVE-2026-98413"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:52.547Z","fetchedAt":"2026-10-20T03:01:48.443Z","references":[{"url":"https://git.kernel.org/stable/c/24e00850bcff46b984f4c44b92e5499450fcfb5a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5a6f9a872b4ff68877caf998bee352153b7154bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/835133337c2ce200db56f62d018c79087dee2603","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8861db305103107199b1426f25fde1fb6d465583","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c781e737aa0de95289b1774d5fd29388895737a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e308c5acfe283a66627fc407065626df4ab753ec","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e77461af13eab5c9a953cc52ec8432cc941d61e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f9da796fa238f8e4414ee8481e6c979759a3d563","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98414","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98414 — In the Linux kernel, the following vulnerability has been resolved: memcg: avoid charging the root m…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmemcg: avoid charging the root memcg from obj_cgroup_charge_pages()\n\nobj_cgroup_charge_pages() resolves the objcg to its memcg and calls\ntry_charge_memcg(), which does not short circuit the root memcg.  That\nmemcg can be the root m…","indicators":{"cves":["CVE-2026-98414"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:52.673Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/6e673d0879ef78c395cfe0d3ba316690a60055d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d5cdff14c385bf42d03c0dd4c3e88ddf4c28b8a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ecc03877b1b05cb1e3a72175ccb868383eccc518","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98415","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98415 — In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-pmu: fix us…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: samsung: exynos-pmu: fix use-after-free of interrupt generator node\n\nThe setup_cpuhp_and_cpuidle() parses the device tree node for the\ninterrupt generation block via of_parse_phandle() and decrements its\nreference count using…","indicators":{"cves":["CVE-2026-98415"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:52.793Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/164313e24cb0f51528bc2099c5564174ead11d8a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4450102d6aa2a85b1d2d8610920fcbe45eb0ef69","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4dd1999783d7d12434006289338373e49492dc96","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98416","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98416 — In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()\n\nIf devm_kcalloc() for rx_chn->flows fails in a channel request function,\nthe error path calls k3_udma_glue_release_rx_chn(), which dereferences\nthe…","indicators":{"cves":["CVE-2026-98416"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:52.910Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/0294b6dd515256c03ea2dbf508ddd3826d788579","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5a6cb4d387eebf7d32a6ed3fcd39f94bf38bd134","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5b2d92b7b177226e1dca2e80dc8369131276c2a4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/89f5414660724bb562db4ac74665da16d4a57d99","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/967612574c542dec71f820a6eb16dea80dd187a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b14e6c52872556de2d6c137531e0ce85085c10ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b2985956e06632939bee47cee13bccd78ad7c3a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b51ed7885ab0e8ecad765adc13b465cb1498cdc9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98417","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98417 — In the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentabl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: xfrm: reject unrepresentable espintcp transport headers\n\nESP-in-TCP can hand xfrm packets whose transport header offset no longer\nfits after the stream parser trims the TCP envelope. The plain transport\nheader reset truncates…","indicators":{"cves":["CVE-2026-98417"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:53.040Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/206f396f46149dc8bc4dfd2b54b9879ba3ee1d7d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/327b2a457dd7d5445f7395f371f3c65de79bd5ce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4a8243fd2e21980fa3fd10c0610e9155057cebd3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6c29681207bc213188afa603dff2d55e7178a341","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/96f01b53c2d05e003b040892256de54a586e8529","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b2b84e73e0386ad0b4f9b8d3afde343e761f5275","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cce630c751279e974fa0bb574d80575e0cc7e8f3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d37a5b87577c4b4c1a1dcb000a9dff1df2cf886b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98418","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98418 — In the Linux kernel, the following vulnerability has been resolved: sched/core: Avoid false migratio…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsched/core: Avoid false migration warning for proxy donors\n\nProxy execution can move a blocked donor's scheduling context to the\nlock owner's CPU even when the donor is migration-disabled. The donor\ndoes not execute there, and its…","indicators":{"cves":["CVE-2026-98418"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:53.173Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/e4a442da49fff7619b3cb2988e477022dcea6688","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fe3c73d7bc769e7afc252f867a3421fe168b898d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98419","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98419 — In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrop_monitor: fix out-of-bounds write in reset_per_cpu_data()\n\nIn reset_per_cpu_data(), al is computed as:\n\n    al = sizeof(struct net_dm_alert_msg);\n    al += dm_hit_limit * sizeof(struct net_dm_drop_point);\n    al += sizeof(struc…","indicators":{"cves":["CVE-2026-98419"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:53.290Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/03b672eba4937ff18337049824a114012d57f202","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/439f392084f8f7f59ab9d47a9579185accefe1d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/530ae0a1458078c7a81fbffd9ff17d42129364d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/56b12f0cd476e4d90a0e2663a80102b388ebf78c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88d640efd655b10f9fa4e381caf777da1f17c2a6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8a04047c6dbff2f49a561b1ff53b043f4807e855","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/caf09c09e0f323015ab6777ed1bad5aa10688631","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d54a044136b129822715e8798899af540ec7a9e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98420","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98420 — In the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expir…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: follow SMB2 session expiration semantics\n\nksmbd_session_register() destroys valid sessions after ten seconds of\ninactivity whenever a client starts another SessionSetup exchange. This\nconfuses Session.IdleTime with Session.E…","indicators":{"cves":["CVE-2026-98420"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:53.427Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/c99ea7855124ca1428a1e59c2b4590aaef34eacf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d7fd1f98607f2cd358e583f9548bdf0173090a86","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98421","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98421 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer s…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: require a peer station for TDLS setup confirm\n\nIt's nonsense for the setup confirm to go to station that\ndoesn't even exist, and it hits a warning when building\nthe frame:\n\n  WARN_ON_ONCE(!sta || !ap_sta)\n\nOnly acce…","indicators":{"cves":["CVE-2026-98421"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:53.573Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/038e1d126304fd25d507fd4e671232df57bd1799","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1c0a5c96473b9e7a5f4c453ef6a13dc0f5589a4b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6bae6ef511a29ef12ab969adeea691067d4d5d74","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/742c762bee59c973684f70dfed7de4945d3141e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d0afa5395c46d73ad2090aa50209886e84f179bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fce36d242a18ddf64731d816a37564103172da11","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98422","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98422 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the AP_VLA…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: reset the AP_VLAN tailroom counter on ifdown\n\nOn ifup, AP_VLAN interfaces get crypto_tx_tailroom_needed_cnt from\nthe AP interface, but it's never decremented again unless the AP is\nalso brought down. Thus, bringing…","indicators":{"cves":["CVE-2026-98422"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:53.737Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/304a874670a0b6ab5589a7f60b4af0251797b121","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3d76b45e8432c0d75fcb9e90d92eaa3176898adf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4504f3960dc4501c73be9f99eabda2e26e9db41e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4b54d01b48445b66c9e576de92b90a3a3ae7b34a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7775759e3cb35ef5a571b2d877c2a9b70a5d5f08","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/875835377d8d62c849b4eb03a7abfafa71d7668f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0b32d3f163d24ea7134380666193bf398e9dc0b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f6b34a7d64324faf28eedc0f8678b0f832f1cc36","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98423","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98423 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: don't hand…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211_hwsim: don't hand frames to mac80211 while stopping\n\nThe code checks ->started for frames coming from wmediumd, but the\nradio can be stopped after the check and before frame delivery,\ncausing mac80211 to hit the WARN…","indicators":{"cves":["CVE-2026-98423"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:53.880Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/2f59be7585dc81baa6f36b0035dd6848ea43d318","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5c79ef616aa16af582fb2cb93b0f750975a0004f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5ce9b2bc9e73213e316a8c72400256a76bf41814","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/87840d4a3a21b1c19b867a80e16ba69dff284de2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c4e4fe330294e3936e0f4e15d6996468f8a45fb2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d7fa45d8123a7f794b93fc22dbcf19f38dc4d8cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98424","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98424 — In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switc…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: undo netns switch if renaming the wiphy fails\n\nOnce all the interfaces have been moved, cfg80211_switch_netns()\nmoves the wiphy itself by setting its network namespace and then\nrenaming it, which makes sysfs move it…","indicators":{"cves":["CVE-2026-98424"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.003Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/739b7bf3942da4cde8eedb143d01a16ed865d1d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/96bef5667b0c4aecb1b850d2343f69b9d684abb9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a41bd1938a9bfe226d444172a7e20e4bd5097960","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98425","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98425 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don't warn when an IBSS has no channel to scan\n\nieee80211_request_ibss_scan() warns when regulatory leaves no\nallowed channel, but that can happen as the regdomain can change\nwhile IBSS is operating, and it can cont…","indicators":{"cves":["CVE-2026-98425"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.110Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/23d51c0bc18f21d957756ba4650520bb3bc726b2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5f139e17f5bdba6b68177dd8afe13fa4549dfc5f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a7491b7efbd9136b120a12ed72af9c12121dd134","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bb91c15953705445778c170a2523f12351c4d928","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98426","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98426 — In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak usin…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path\n\nmwifiex_pcie_request_irq() registers each MSI-X vector with a per-index\ndev_id (&card->msix_ctx[i]). On a request_irq() failure the cleanup loop\n\"for (j = 0; j < i;…","indicators":{"cves":["CVE-2026-98426"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.220Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/03d5e4776e8b71c2468c5c3c48b39202c87a8796","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0969c9688389f2e0f65b1a924b0dd6625a3bb776","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/11bc2cbb14f450eaa47cce9eb086f948ef8f4bcd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1a60cb2292194cc9eafae7ca8a8a72d37ae78d97","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2761b21cb896b1da8dd46cee5084c9032b2d7098","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5fd4cc87e6cc0839aac89c24ebe39ce262fe088f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a3d722190cdef18da4878b5efc27c3c386dda248","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fcac5813f324cd07dfd36b4adf624fc70f7587d6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98427","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98427 — In the Linux kernel, the following vulnerability has been resolved: net/sched: codel: bound the drop…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: codel: bound the dropping loop per dequeue call\n\nThe CoDel control law schedules the next drop one interval/sqrt(count)\nafter the previous drop, using the configured interval\n(codel_params.interval). For very small inter…","indicators":{"cves":["CVE-2026-98427"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.343Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/7f4a5ec6258fd7c92633ec4b0493fc51166d9398","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bacd72289d34d8c05b7de5a12448b87b6dd93878","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98428","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98428 — In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb: 6fire: Avoid embedded URBs\n\nThe USB 6fire driver uses URBs embedded in different structs for PCM,\nMIDI and communication, and this is basically a buggy implementation\nnowadays; since a URB is managed with a refcount, thi…","indicators":{"cves":["CVE-2026-98428"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.460Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/3ef9093d83ffecb8e5f6c9d5769a52d39df74f7a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/52a43c2d57e774489ac3fbbac06ff02f19bd9a52","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8b8559aeaba2e51cfee1779b2383b085991f7d81","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/999f433c09e4668412bd68ca207ae2b4af863862","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9fe49dbc023e82dfaee7b245997d820d01742a9a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d181434549b3da668110a25d743848cce9897f4e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98429","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98429 — In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources aliv…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/efa: Keep EQ resources alive while IRQ is registered\n\nThe completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was\nregistered before that state was initialized, while teardown released the\nbuffer before free_ir…","indicators":{"cves":["CVE-2026-98429"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.580Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/38871ff47e2a02f8d9a333a65f358d987247b5b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3cd652dfcd822af26ba75d6d2d245ea7f73b499e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/795eb34bfd8b1ab347adc41a11e4bb97c3ac0ce6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9ecd3dcbdf1f315aadc049b291f59c79dc478062","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c767e2812cac83fef70fb8932c3f0fe97dff9388","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e22a3627b7151754f07f90ea3d1ab6e85f5d93f4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98430","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98430 — In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues aliv…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/efa: Keep admin queues alive while IRQ is registered\n\nThe management IRQ handler accesses both the admin completion queue and the\nasync event queue. The driver registered the IRQ before constructing these\nqueues and destroyed…","indicators":{"cves":["CVE-2026-98430"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.697Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/00f7df59543cce445cfd2f109ace88c17d8aef4d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0a8a105978e5ace0d885964317c5aed8ab4c0a0c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bc7e64bad96c23fb343f47689670d0037f1a65e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cf5520d1c931a70ccce0a1a247113bcec47a42be","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2a1c0bf4139c17b8d7668322b78c28d8c5b2dd0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e08aca85c02ff290f785f07acae758f0daf5f49e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98431","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98431 — In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmap_lock/disas…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency\n\nCommit 51976c6cd786 (\"RDMA/core: Provide rdma_user_mmap_disassociate()\nto disassociate mmap pages\") introduced disassociation_lock to protect\nnew mmap registration…","indicators":{"cves":["CVE-2026-98431"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:17:54.887Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://git.kernel.org/stable/c/426f54f20b79c5b164a0472ad3f6ba36afcd08c6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a44a3f175eaee7e5aeb6a8fed381c4a0d5f49236","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101895","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101895 — Angular is a development platform for building mobile and desktop web applications using TypeScript/…","description":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angular/platform-server DOM emulation parser can enter an infinite synchronous loop when Angular server-side rendering proce…","indicators":{"cves":["CVE-2026-101895","CVE-2026-101896","CVE-2026-101897"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:03.370Z","fetchedAt":"2026-10-20T03:01:48.444Z","references":[{"url":"https://github.com/angular/angular/commit/3db26e2544964d07a520836ad01f02f36ec88e25","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/commit/fc2e8fbc0bda2f5c11585e8a0cbd88c074f5e567","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/releases/tag/v20.3.31","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/releases/tag/v21.2.23","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/releases/tag/v22.1.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/security/advisories/GHSA-f67j-2jqw-jpq7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/domino/commit/4d97473116d000e3fd4d6f75ec98cbd67576fa6f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/commit/03872a80bcf1c89b2b04cdd3f444b2ee954da583","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/commit/5af61216eab8bf4a6697a1d79bda3d857c06f89d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/commit/ddfe21072ba32ca4cd9d7d3c6b7df66af81d58c4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/issues/70716","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/pull/70717","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/releases/tag/v20.3.32","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/releases/tag/v21.2.24","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/releases/tag/v22.2.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/security/advisories/GHSA-ff3f-86qr-9cv3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/commit/7c053599c79a6ddd785a9bae33ff9fc7b355ea0d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/commit/cf492e8a372e2bbddb84987df12c33a52c23c72f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/commit/e02c4d89bcf5da9af499e0dfbba8c29206976ab3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/pull/70623","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/angular/angular/security/advisories/GHSA-r653-wxfp-pp9c","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-84471","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84471 — The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_…","description":"The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry.","indicators":{"cves":["CVE-2026-84471"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T15:17:26.077Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://community.openvpn.net/Security%20Announcements/CVE-2026-84471","label":"security@openvpn.net","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100169","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-100169 — Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0…","description":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre_social_login() in api/sr…","indicators":{"cves":["CVE-2026-100169"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:28.350Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/prowler-cloud/prowler/commit/0f31f1a3c2daa05b4d77a78f451e3fbfb3fe3411","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"primary"},{"url":"https://github.com/prowler-cloud/prowler/pull/12013","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"primary"},{"url":"https://github.com/prowler-cloud/prowler/releases/tag/5.35.0","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"primary"},{"url":"https://github.com/prowler-cloud/prowler/security/advisories/GHSA-h8m9-jgf8-vwvp","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"primary"},{"url":"https://secur0.com/en/cna/cve-list/cve-2026-100169-prowler-account-pre-hijacking","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102893","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102893 — Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenI…","description":"Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches the identity provider email claim to an active account's delivery_email without rejecting an explicitly false email_verified claim. If a configured identity provider returns an…","indicators":{"cves":["CVE-2026-102893"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:29.987Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/zulip/zulip/commit/68d2d9defa39f8af96a50fc7430efc34dee120b5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/commit/b40f191a8c71e74fcb471f71de6a1233de157102","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/pull/39913","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/releases/tag/12.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/zulip/zulip/security/advisories/GHSA-xw9h-9rcm-hx4m","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-67414","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-67414 — RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, de…","description":"RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_common/src/amqp10_binary_parser.erl materializes each element of AMQP 1.0 arrays whose shared constructor has zero width, while limiting only the number of elements in each array and not the…","indicators":{"cves":["CVE-2026-67414"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:50.703Z","fetchedAt":"2026-10-20T03:01:48.445Z","references":[{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/3f0f67dfb7c4390e3cbfa25ab3ee19dcb0845bd4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.3.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-w6mq-4qpx-v7mh","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-67416","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-67416 — RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, th…","description":"RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0 server_mode parser in deps/amqp10_common/src/amqp10_binary_parser.erl matches the textual prefixes of symbolic data, sequence, and value body descriptors without verifying their e…","indicators":{"cves":["CVE-2026-67416"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:17:50.843Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/c9b4b10c2dbf0f1c89f10b482ac8b45f84dc5954","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/commit/d5186e66e056960f58e2d0fbee2fcc66e1ed6fb9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/17017","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/pull/17287","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.3.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-p35w-6mx2-q4pc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-p35w-6mx2-q4pc","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105236","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105236 — Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client t…","description":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there.\n\nA server that serves several SNI names…","indicators":{"cves":["CVE-2026-105236"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:14.720Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://cna.erlef.org/cves/CVE-2026-105236.html","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://github.com/erlang/otp/commit/0c20f3683b3c81fd30b46047195be9b3d2c69d76","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/commit/10ee925d0fee8413f1170cc21bfcf123c8d22454","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/commit/4d76adbf39d547a931048544df09c3c087e56618","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/commit/4fe38c4b8b2c8024afb60990e598ff823743fd54","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/security/advisories/GHSA-2g23-cgjh-34gq","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-105236","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://www.erlang.org/doc/system/versions.html#order-of-versions","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105659","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105659 — Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote a…","description":"Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin HTTP/2 stream processes indefinitely via a trickle of small WINDOW_UPDATE frames. A stream whose response outruns the connection or stream send window blocks until the peer grants more…","indicators":{"cves":["CVE-2026-105659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:15.657Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://cna.erlef.org/cves/CVE-2026-105659.html","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://github.com/mtrudel/bandit/commit/d88b21953c65061f21136ea76a89a4f95a2ac7a1","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/mtrudel/bandit/commit/fff06efe3be962b484bd4d3eb339372fda5a231f","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/mtrudel/bandit/security/advisories/GHSA-69m6-wcv4-rwcf","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-105659","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://github.com/mtrudel/bandit/security/advisories/GHSA-69m6-wcv4-rwcf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-59951","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-59951 — The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MC…","description":"The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, including FastMCP, MCPServer, Server.streamable_http_app(), and StreamableHTTPSessionManager, retain session entries without an…","indicators":{"cves":["CVE-2026-59951"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:18:29.690Z","fetchedAt":"2026-10-20T03:01:48.446Z","references":[{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/92120b4b0f50385af096592d7cee932fc1d994e7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/d2290ca3434731b68ea3e2270bc06a6e6575931b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/pull/3395","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/pull/3426","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.30.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.2.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-84m7-p3x7-pcfv","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-94200","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-94200 — Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3,…","description":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node.\n\nThe TLS 1.3 client decodes the extensions…","indicators":{"cves":["CVE-2026-94200"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:21.590Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://cna.erlef.org/cves/CVE-2026-94200.html","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://github.com/erlang/otp/commit/00a333bcf2800b69f540369b54167e897dae7219","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/commit/0abe6f66db0d295cd06b0efab3bdb3caa2803930","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/commit/66febc190e6dc42a5c4aedbfe250bf9a2edc2d5e","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/commit/cd0334854bf3ef56dc16f9fb728efe88fb05c4ac","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/security/advisories/GHSA-m5mh-q53w-67jq","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-94200","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://www.erlang.org/doc/system/versions.html#order-of-versions","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96596","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-96596 — Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar m…","description":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service via…","indicators":{"cves":["CVE-2026-96596"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:20:28.983Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://cna.erlef.org/cves/CVE-2026-96596.html","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://github.com/erlang/otp/commit/3086307f311b78b38644a7787a3aca6a3f95a9d5","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/commit/fbf2c7194f6fce4b7b66dc0bcaa4f6b4b85e088f","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/otp/security/advisories/GHSA-phm5-m6cj-5382","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/erlang/rebar3/commit/23dbdb5d1f87f56902aef296c88a20049cd0c6e4","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/hexpm/hex/commit/5543a1919c709d8eb2b317f62aad76ca1eed375c","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/hexpm/hex/commit/7847c23d09ab52113614c3718e1e7d368743da5d","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/hexpm/hex/commit/8e1067131a13949eff30623f31648a945ffd5418","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/hexpm/hex_core/commit/13bb9fbba418a406af614790b8d5cd458259ee70","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/hexpm/hex_core/commit/a2ece683e6e88a3ec95ad20b09aca426e08b372e","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-96596","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://www.erlang.org/doc/system/versions.html#order-of-versions","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100413","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-100413 — SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Hel…","description":"SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml as stringData.seaweedfs_sftp_ssh_private_key. A standalone deployment presented that p…","indicators":{"cves":["CVE-2026-100413"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:10.633Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/seaweedfs/seaweedfs/commit/742bd9f3aa9d9b83c9ad71389f66566f930acaa9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/seaweedfs/seaweedfs/pull/10390","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/seaweedfs/seaweedfs/releases/tag/4.41","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-hqp5-j79g-vr89","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102476","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102476 — In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client…","description":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the SSL semantics of the desired SSL properties. It is possible for a client to ask for an SSL context a…","indicators":{"cves":["CVE-2026-102476"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:17.503Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-2vhw-4xwj-r38v","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/350","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103414","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103414 — The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that…","description":"The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page_header_data_size` is never validated against the glyph data a page actually contains, the two passes can read different…","indicators":{"cves":["CVE-2026-103414"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:19.637Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/eclipse-threadx/guix/security/advisories/GHSA-m2f3-cv9x-68q7","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/358","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103415","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103415 — When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second C…","description":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication com…","indicators":{"cves":["CVE-2026-103415"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:19.790Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-5pv3-rhf5-gwgq","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/357","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106464","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-106464 — `_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length -…","description":"`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature length…","indicators":{"cves":["CVE-2026-106464"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:24.960Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-ww3q-3444-q488","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/368","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106465","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-106465 — The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but neve…","description":"The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from th…","indicators":{"cves":["CVE-2026-106465"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:25.093Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-7c5f-gmpm-f655","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/379","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-42093","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-42093 — Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the…","description":"Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param_query_N_{key=value} parameters and passed attacker-controlled values to replace_query_parameters() for raw substitution…","indicators":{"cves":["CVE-2026-42093"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:17:36.980Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/getredash/redash/commit/048bcd9fe7208e42f2f0cdf007d7e9dcb82829d8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/releases/tag/v26.9.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/security/advisories/GHSA-v43x-rgcc-wh77","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/security/advisories/GHSA-v43x-rgcc-wh77","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-76083","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-76083 — Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data sour…","description":"Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/query_runner/json_ds.py used _get_all_results() to combine its configured base_url with a user-supplied query URL by using urljoin. An absolute query URL replaced the configu…","indicators":{"cves":["CVE-2026-76083"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:18:18.427Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/getredash/redash/commit/2be9552d7e87bc3be76016e183a9f593e33073c7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/releases/tag/v26.9.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/security/advisories/GHSA-m723-r867-wfgw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77371","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77371 — Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query r…","description":"Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's _connect() path in redash/query_runner/duckdb.py created connections with enable_external_access left at its default value of true. A user with query access to an administrator-created DuckDB…","indicators":{"cves":["CVE-2026-77371"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:18:18.570Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/getredash/redash/commit/7387072af40913a64e7b3be470491792f2d5551c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/releases/tag/v26.9.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/security/advisories/GHSA-cr68-3xxj-cg9f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getredash/redash/security/advisories/GHSA-cr68-3xxj-cg9f","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-100406","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-100406 — dbt enables data analysts and engineers to transform their data using the same practices that softwa…","description":"dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From 2.0.0-alpha.0 until 2.0.0-alpha.5, dbt docs serve exposes the unauthenticated POST /api/v1/query endpoint in crates/dbt-docs-server/src/handlers/query.rs,…","indicators":{"cves":["CVE-2026-100406"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:16:59.847Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/dbt-labs/dbt/commit/3a5d26fe02b58382720d04cbd87143b7b6775413","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dbt-labs/dbt/releases/tag/v2.0.0-alpha.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dbt-labs/dbt/security/advisories/GHSA-h2j2-2r7g-rff8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dbt-labs/dbt/security/advisories/GHSA-h2j2-2r7g-rff8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102460","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102460 — In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a s…","description":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthHandler when used with scope-requiring authentication handlers such as JWTAuthHandler or OAuth2AuthHandler. When a user is already aut…","indicators":{"cves":["CVE-2026-102460"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:05.050Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/vert-x3/vertx-web/security/advisories/GHSA-2p39-cr56-w58j","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/339","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102479","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102479 — In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x de…","description":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted a…","indicators":{"cves":["CVE-2026-102479"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:05.313Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-ch7p-g5pm-3gqx","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/352","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102748","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102748 — Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers admini…","description":"Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers administrative HTTP routes on port 6080 without authentication when the administrative interface is enabled. The /removeNode route accepts attacker-controlled id and group values and passes them to Server.R…","indicators":{"cves":["CVE-2026-102748"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:05.700Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/dgraph-io/dgraph/commit/c32f6041387fa631dbc057e265b71aec3384ead1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dgraph-io/dgraph/releases/tag/v25.4.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dgraph-io/dgraph/security/advisories/GHSA-qj98-gp63-54xj","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102755","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102755 — DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated use…","description":"DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users with folder creation permission can store HTML-bearing names through datasource/createFolder or datasetTree/save. The datasource and dataset Move to dialogs in core/core-frontend/src/views/visualiz…","indicators":{"cves":["CVE-2026-102755","CVE-2026-102756","CVE-2026-104142","CVE-2026-104143"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:05.857Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/dataease/dataease/commit/f9082e2fa7a3d289115ae6f4a20ca58afd001be3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/releases/tag/v2.10.26","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/security/advisories/GHSA-pjh9-r96g-pcqw","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/commit/8cc4dbd41d8027ea7fcd066cc9a91d698f82e18a","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/security/advisories/GHSA-6pfp-pqvf-xvfg","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/commit/59191a17657b75d0721e428c10bc0065c3310b17","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/security/advisories/GHSA-gcr3-cj2q-gj4q","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/commit/c8cde16056a9e46aa4866ded94db2b250758b337","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/security/advisories/GHSA-h32f-m89w-g35f","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102899","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102899 — Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML…","description":"Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the victim's…","indicators":{"cves":["CVE-2026-102899"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:06.170Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/getsentry/self-hosted/releases/tag/26.7.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getsentry/sentry/commit/9c982d4bcb81c93e2db552084bcbb45cdd34bdd3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getsentry/sentry/commit/ec963de4ec8c7f340f286c6f613e55458a9e5ddf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getsentry/sentry/pull/120467","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getsentry/sentry/pull/120702","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getsentry/sentry/releases/tag/26.7.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getsentry/sentry/security/advisories/GHSA-w699-8wff-fqxw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104141","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104141 — DataEase is an open source data visualization and analysis tool. Authenticated users with datasource…","description":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvider…","indicators":{"cves":["CVE-2026-104141"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:08.013Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/dataease/dataease/commit/181bb5cb95a1174f04689b3b6042d5e0c71b782d","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/releases/tag/v2.10.27","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/security/advisories/GHSA-8hgp-vw27-hxph","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/dataease/dataease/security/advisories/GHSA-8hgp-vw27-hxph","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-109506","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109506 — Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in…","description":"Multiple\nTP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary\ntransformation in the HTTP web-management login flow. An unauthenticated attacker\non the same local network who can capture the network traffic associated with\nlegitimate administrator login may be able to derive an a…","indicators":{"cves":["CVE-2026-109506"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T19:17:09.820Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://www.tp-link.com/en/support/download/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/download/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5344/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-0321","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0321 — Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated at…","description":"Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition re…","indicators":{"cves":["CVE-2026-0321"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:26.887Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0321","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-54566","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-54566 — Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, M…","description":"Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js and .crossnote/parser.js files with vm.runInNewContext, which does not provide a security boundary from the Node.js host r…","indicators":{"cves":["CVE-2026-54566"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:47.403Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/shd101wyy/crossnote/commit/e4890d64502e53b717cce0cb73f1a78b244dc640","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/crossnote/pull/443","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/crossnote/releases/tag/0.9.30","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/commit/0d4010988c6ae56a38c6dec4a7509cbd5a7dcb4c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/pull/2320","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/releases/tag/0.8.29","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/security/advisories/GHSA-427h-jhpr-8jch","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/security/advisories/GHSA-427h-jhpr-8jch","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-54701","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-54701 — Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, M…","description":"Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .crossnote/head.html content and passes it through resolvePathsInHeader before inserting it into the head of the preview webview document without r…","indicators":{"cves":["CVE-2026-54701"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:47.580Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/shd101wyy/crossnote/commit/8c55a2ba3365712a1caa4abeece0383bc2994d48","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/crossnote/pull/444","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/crossnote/releases/tag/0.9.31","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/commit/8bc848b6cbb42b9f35a0f95f7c3bf29b8302970e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/pull/2323","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/releases/tag/0.8.30","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/security/advisories/GHSA-mcwg-4j78-qwv3","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-54702","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-54702 — Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, t…","description":"Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-controlled command value and attacker-controlled args, constructs a command in the _crossnote namespace, and invokes vscode.co…","indicators":{"cves":["CVE-2026-54702","CVE-2026-54703"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:17:47.737Z","fetchedAt":"2026-10-20T03:01:48.447Z","references":[{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/commit/8bc848b6cbb42b9f35a0f95f7c3bf29b8302970e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/pull/2323","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/releases/tag/0.8.30","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/security/advisories/GHSA-83c6-hcjv-pvmg","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/shd101wyy/vscode-markdown-preview-enhanced/security/advisories/GHSA-82rc-7g3m-2c42","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0311","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0311 — A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a…","description":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","indicators":{"cves":["CVE-2026-0311"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:17.687Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0311","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0312","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0312 — Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthentica…","description":"Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.","indicators":{"cves":["CVE-2026-0312"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:18.013Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0312","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0313","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0313 — A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query conte…","description":"A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.","indicators":{"cves":["CVE-2026-0313"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:18.173Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0313","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0314","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0314 — A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local u…","description":"A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.\n\nThe GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.","indicators":{"cves":["CVE-2026-0314"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:18.323Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0314","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0315","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0315 — A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a lo…","description":"A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on Linux, Windows, i…","indicators":{"cves":["CVE-2026-0315"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:18.517Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0315","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0316","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0316 — A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a m…","description":"A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface.\n\n\n\nThe security risk posed by this issue is minimized when the management interface is restricted…","indicators":{"cves":["CVE-2026-0316"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:18.687Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0316","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0317","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0317 — A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated use…","description":"A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request.\n\nThe security risk posed by this issue is significantly minimized by rest…","indicators":{"cves":["CVE-2026-0317"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:18.940Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0317","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0318","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0318 — A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Network…","description":"A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.\n\nCloud NG…","indicators":{"cves":["CVE-2026-0318"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:19.180Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0318","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0319","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0319 — An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS…","description":"An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. \n\nCloud NGFW and Panorama are not affected by this vulnerability.","indicators":{"cves":["CVE-2026-0319"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:19.550Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0319","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-0320","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-0320 — A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated ad…","description":"A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interface.\n\n\n\n\nThe security ri…","indicators":{"cves":["CVE-2026-0320"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T21:17:20.053Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0320","label":"psirt@paloaltonetworks.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102298","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102298 — In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permissio…","description":"In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that distinguish nonexistent users, invalid passwor…","indicators":{"cves":["CVE-2026-102298"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:22.150Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.omadanetworks.com/en/download/software/omada-controller/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://support.omadanetworks.com/us/document/136187/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://support.omadanetworks.com/us/download/software/omada-controller/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108335","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108335 — When the password reset functionality is enabled, and email is configured, an attacker could take ov…","description":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.\n\n\n\nThere is no rate limiting on the attempts to enter the reset code, leading to the possibility of a brute force solution to the password reset challenge.…","indicators":{"cves":["CVE-2026-108335"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:22.290Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://knowledge.hitachivantara.com/portal/app/portlets/results/viewsolution.jsp?solutionid=261012131624707&guest=0","label":"security.vulnerabilities@hitachivantara.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108336","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108336 — When the default self-signed certificate is used, an attacker could gain administrative access to th…","description":"When the default self-signed certificate is used, an attacker could gain administrative access to the application.\n\n\n\nThe SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacke…","indicators":{"cves":["CVE-2026-108336"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:22.433Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://knowledge.hitachivantara.com/portal/app/portlets/results/viewsolution.jsp?solutionid=261012131624707&guest=0","label":"security.vulnerabilities@hitachivantara.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108337","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108337 — An administrator could retrieve the password reset code for any user and take over the account. The…","description":"An administrator could retrieve the password reset code for any user and take over the account.\n\n\n\nThe password reset codes were included in the output of an API and could be used to reset the password of any account. The API is limited to use by administrator accounts only.\n\n\n\nAn attacker who alrea…","indicators":{"cves":["CVE-2026-108337"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T22:17:22.563Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://knowledge.hitachivantara.com/portal/app/portlets/results/viewsolution.jsp?solutionid=261012131624707&guest=0","label":"security.vulnerabilities@hitachivantara.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107795","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107795 — Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce a…","description":"Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perform privileged certificate management operations. \n\nSuccessful exploitation may allow a low-privileged authenticated user to upload o…","indicators":{"cves":["CVE-2026-107795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:22.250Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://support.omadanetworks.com/en/download/software/omada-controller/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://support.omadanetworks.com/us/document/136188/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://support.omadanetworks.com/us/download/software/omada-controller/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110840","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110840 — n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of t…","description":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation. When a workflow binds untrusted input such as webhook fields to the Query field,…","indicators":{"cves":["CVE-2026-110840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:24.320Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-5qpp-pqww-h7fp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-sql-injection-via-microsoft-sql-node-query-field","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110841","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110841 — n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, whi…","description":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent co…","indicators":{"cves":["CVE-2026-110841"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:24.477Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-p3pg-xw4f-m72c","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.0-authorization-bypass-in-agent-chat-resume-tool-approval","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110842","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110842 — n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP w…","description":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holdin…","indicators":{"cves":["CVE-2026-110842"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:24.637Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-5jr4-xmvf-frmj","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-prototype-pollution-via-mcp-workflow-validation-interpreter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110843","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110843 — n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerabili…","description":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize endpoint, which resolves clients by URL path but stores the caller's raw identifier as the record key. Unauthenticated attackers can send identifiers differin…","indicators":{"cves":["CVE-2026-110843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:24.787Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-3qcw-p65v-c7vq","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-unauthenticated-unbounded-oauth-client-persistence-via-authorize-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110844","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110844 — n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow edito…","description":"n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inline sub-workflows. Attackers can save workflows with Workflow Tool or Workflow Retriever inline definitions referencing…","indicators":{"cves":["CVE-2026-110844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:24.940Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-r6g9-5cpp-ppwr","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.83-credential-authorization-bypass-via-nested-inline-sub-workflows","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110845","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110845 — n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerabi…","description":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent…","indicators":{"cves":["CVE-2026-110845"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:25.097Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-x8wx-g24x-3549","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.83-2.41.4-and-2.42.1-code-execution-via-git-node-log-operation","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110846","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110846 — n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoi…","description":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, running d…","indicators":{"cves":["CVE-2026-110846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:25.253Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-728h-pmr2-7cgh","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-send-and-wait-hmac-signature-bypass-via-waiting-webhook","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110847","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110847 — n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site script…","description":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in the Chat Trigger hosted-chat page, where insufficiently sanitised customCss values are interpolated into the page as markup. Workflow authors can publish a chat without n8n user a…","indicators":{"cves":["CVE-2026-110847"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:25.407Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-x5cw-hm7v-q7mj","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.83-2.41.4-and-2.42.1-stored-xss-via-chat-trigger-customcss-parameter","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110848","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110848 — n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vuln…","description":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named __proto__ thro…","indicators":{"cves":["CVE-2026-110848"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:25.563Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-3p2g-2wpm-8h3g","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.83-2.41.4-and-2.42.1-prototype-pollution-via-ai-workflow-builder-connection-merge","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110849","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110849 — n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the…","description":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the ow…","indicators":{"cves":["CVE-2026-110849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:25.713Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-29xw-66fq-4xc3","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.83-2.41.4-and-2.42.1-stored-xss-via-binary-data-file-preview","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110850","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110850 — n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node par…","description":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to re…","indicators":{"cves":["CVE-2026-110850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:25.870Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-x25p-9mr6-cwgp","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-credential-check-bypass-via-agent-node-parameters","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110851","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110851 — n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create end…","description":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user wit…","indicators":{"cves":["CVE-2026-110851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:26.037Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-2r5r-xgvc-rj4p","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-2.41.4-and-2.42.1-cross-project-agent-ownership-transfer-via-agents-create-endpoint","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110852","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110852 — n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass b…","description":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit thi…","indicators":{"cves":["CVE-2026-110852"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:26.197Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-4c7j-qff5-r9cx","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.83-2.41.4-and-2.42.1-unauthenticated-workflow-execution-via-dynamic-path-webhook-resolution","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110853","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110853 — n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members…","description":"n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to and…","indicators":{"cves":["CVE-2026-110853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:26.343Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-866p-xg8v-g2q7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.83-authorization-bypass-via-execute-sub-workflow-inline-json","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110854","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110854 — Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sendi…","description":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit. A client holding only the public application keys can sign up, request a verification email, or request a password reset w…","indicators":{"cves":["CVE-2026-110854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T23:17:26.490Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/parse-community/parse-server/security/advisories/GHSA-46jj-qw3p-48fc","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/parse-server-before-8.6.97-and-9.10.2-alpha.6-denial-of-service-via-unhandled-email-error","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110912","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110912 — In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (s…","description":"In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address length (ar_pln) fields of incoming ARP packets. in_arpreply() then uses these attacker-controlled value…","indicators":{"cves":["CVE-2026-110912"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T04:18:23.010Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://github.com/DragonFlyBSD/DragonFlyBSD/commit/4bb22ffcf2e9fb44995fbfd9945194afc87fb182","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/dreamfast/CVE-2026-110912","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-93483","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-93483 — In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthori…","description":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including adminis…","indicators":{"cves":["CVE-2026-93483"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T04:18:30.153Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.znuny.org/advisories","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.znuny.org/en/advisories/zsa-2026-14","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-93484","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-93484 — Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplie…","description":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial…","indicators":{"cves":["CVE-2026-93484"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T04:18:30.373Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.znuny.org/advisories","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.znuny.org/en/advisories/zsa-2026-15","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-29895","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-29895 — A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote atta…","description":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following version:\nQsync Central 5.0.0.4…","indicators":{"cves":["CVE-2025-29895","CVE-2025-29896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:55.803Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Qsync%20&app=QsyncServer&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-29897","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-29897 — A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central…","description":"A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes.\n\nWe have already fixed the vulnerability in the following version:\nQsync Centr…","indicators":{"cves":["CVE-2025-29897"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:56.110Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Qsync%20&app=QsyncServer&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-68403","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-68403 — An external control of system or configuration setting vulnerability has been reported to affect QuR…","description":"An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system.\n\nWe have already fixed the vulnerability in the following version:\nQuRo…","indicators":{"cves":["CVE-2025-68403"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.000Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.qnap.com/en/release-notes/qurouter/overview/2.7","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-68404","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-68404 — A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRout…","description":"A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.\n\nWe have already fixed the vulnerability in the following version:\nQuRouter 2.6.4.001 and lat…","indicators":{"cves":["CVE-2025-68404"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:57.157Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://www.qnap.com/en/release-notes/qurouter/overview/2.7","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-19377","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-19377 — Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle at…","description":"Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or modify tunnel traffic.","indicators":{"cves":["CVE-2026-19377"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:59.143Z","fetchedAt":"2026-10-20T03:01:48.448Z","references":[{"url":"https://knowledge.catonetworks.com/docs/security-vulnerability-cve-2026-19377-that-impacts-cato-client-versions","label":"2505284f-8ffb-486c-bf60-e19c1097a90b","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-22896","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-22896 — A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If…","description":"A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vulnerability to inject malicious code.\n\nWe have already fixed the vulnerability in the following version:\nNetwork & Virtual…","indicators":{"cves":["CVE-2026-22896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:59.303Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/release-notes/qts/5.1.8.2823/20240712","label":"security@qnapsecurity.com.tw","domainType":"other"},{"url":"https://www.qnap.com/en/release-notes/qts/5.2.1.2930/20241025","label":"security@qnapsecurity.com.tw","domainType":"other"},{"url":"https://www.qnap.com/en/release-notes/quts_hero/h5.1.8.2823/20240712","label":"security@qnapsecurity.com.tw","domainType":"other"},{"url":"https://www.qnap.com/en/release-notes/quts_hero/h5.2.1.2929/20241025","label":"security@qnapsecurity.com.tw","domainType":"other"},{"url":"https://www.qnap.com/en/release-notes/qutscloud/c5.2.4.3041/20250211","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-24715","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-24715 — An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, t…","description":"An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.\n\nWe have already fixed the vulnerability in the following version:\nQuRouter 2.7.2.113 and later","indicators":{"cves":["CVE-2026-24715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:59.467Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/release-notes/qurouter/overview/2.7","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-24718","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-24718 — A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains…","description":"A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nQsync Central 5.0.0…","indicators":{"cves":["CVE-2026-24718","CVE-2026-26243"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:17:59.610Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Qsync%20&app=QsyncServer&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-39993","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-39993 — A relative path traversal vulnerability has been reported to affect Download Station. If a remote at…","description":"A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nDownloa…","indicators":{"cves":["CVE-2026-39993"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:00.317Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app_releasenotes/list.php?app_choose=DownloadStation","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-41544","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-41544 — A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a u…","description":"A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nQcalAgent 1.1.10 and la…","indicators":{"cves":["CVE-2026-41544"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:18:00.467Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=QcalAgent&app=qcalendar&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102475","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102475 — In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provide…","description":"In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered bytes limit to ensure a bounded buffer for each request. This can be used to force a server to indefinitely allocate heap. This vulnerabi…","indicators":{"cves":["CVE-2026-102475"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T08:16:36.797Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/eclipse-vertx/vertx-http-proxy/security/advisories/GHSA-mjwh-5qfp-hjgc","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/351","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-101287","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101287 — Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie n…","description":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these va…","indicators":{"cves":["CVE-2026-101287"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:14.367Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/authentication-bypass-stela-diaple-networking","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102477","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102477 — In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a g…","description":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in bytes, however the maximum size applies to the received bytes. When applied to a compressed message, this only applies to the compress…","indicators":{"cves":["CVE-2026-102477"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:15.720Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/eclipse-vertx/vertx-grpc/security/advisories/GHSA-4wvq-75mw-q6cg","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/349","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105271","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105271 — \"ゲオアプリ\" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive informatio…","description":"\"ゲオアプリ\" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application.","indicators":{"cves":["CVE-2026-105271"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:16.410Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://apps.apple.com/jp/app/id590190880","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://jvn.jp/en/jp/JVN40460777/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://play.google.com/store/apps/details?id=jp.co.geoonline.app&hl=ja","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16436","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-16436 — Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS…","description":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10…","indicators":{"cves":["CVE-2026-16436","CVE-2026-16437"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:16.717Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-006_en.pdf","label":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-16438","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-16438 — Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and p…","description":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electr…","indicators":{"cves":["CVE-2026-16438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:17.087Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2026-006_en.pdf","label":"Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-18661","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-18661 — In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the J…","description":"In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the same `url-pattern` were not being applied if the `web.xml` had m…","indicators":{"cves":["CVE-2026-18661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:17.270Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-v6xf-996f-c35f","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/211","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-v6xf-996f-c35f","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-35088","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-35088 — Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcode…","description":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication.\n\nThis issue was fixed in IPx series version 6.62.0100.\n\nThe issue STILL EXISTS in End-Of-Life telep…","indicators":{"cves":["CVE-2026-35088"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:17.417Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://cert.pl/posts/2026/10/CVE-2026-35088","label":"cvd@cert.pl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63314","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-63314 — WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_js…","description":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks.\n\n\nThis issue was fixed in IPx series version 6.62.0100.","indicators":{"cves":["CVE-2026-63314"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:17.713Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://cert.pl/posts/2026/10/CVE-2026-35088","label":"cvd@cert.pl","domainType":"other"},{"url":"https://www.slican.pl/oferta/oprogramowanie/aplikacje-cti/webcti-dla-abonenta/","label":"cvd@cert.pl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63315","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-63315 — WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext.…","description":"WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account.\n\n\n\nThis issue was fixed in IPx series version 6.62.0100.","indicators":{"cves":["CVE-2026-63315"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:17.857Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://cert.pl/posts/2026/08/CVE-2026-63314","label":"cvd@cert.pl","domainType":"other"},{"url":"https://www.slican.pl/oferta/oprogramowanie/aplikacje-cti/webcti-dla-abonenta/","label":"cvd@cert.pl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75559","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-75559 — The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which…","description":"The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.","indicators":{"cves":["CVE-2026-75559"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:18.147Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://apps.apple.com/jp/app/%E8%BB%8A%E6%A4%9C%E8%A8%BC%E9%96%B2%E8%A6%A7%E3%82%A2%E3%83%97%E3%83%AA/id1633947799","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://jvn.jp/en/jp/JVN94004488/","label":"vultures@jpcert.or.jp","domainType":"other"},{"url":"https://play.google.com/store/apps/details?id=jp.go.mlit.android.shakenetsuran&hl=ja","label":"vultures@jpcert.or.jp","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76182","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-76182 — In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to te…","description":"In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context.\n\n\n\nHowever, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied…","indicators":{"cves":["CVE-2026-76182"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:18.300Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-4hxv-32vm-5h2m","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/237","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-4hxv-32vm-5h2m","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-76184","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-76184 — In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attac…","description":"In Eclipse Jetty, HttpClient may receive a redirect of the form:\n\n\n\n```\n\n\n\n/secure/../evil\n\n\n\n```\n\n\n\nIf an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redire…","indicators":{"cves":["CVE-2026-76184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:18.443Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-qfr2-43g5-g768","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/236","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-qfr2-43g5-g768","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77711","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77711 — When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply w…","description":"When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).\n\n\n\nThe client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the `Proxy-Authentication` header, which arrives to the…","indicators":{"cves":["CVE-2026-77711"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T09:17:18.573Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-r2c5-3p8g-wpvw","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/238","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-r2c5-3p8g-wpvw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-18659","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-18659 — In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-…","description":"In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.","indicators":{"cves":["CVE-2026-18659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:11.943Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-53x7-f9fc-h7qr","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/214","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-53x7-f9fc-h7qr","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-18660","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-18660 — In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/b…","description":"In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.","indicators":{"cves":["CVE-2026-18660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:12.097Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/212","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-18662","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-18662 — In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more…","description":"In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec.\n\n\n\nResulting in later http-method-omission sets overriding previo…","indicators":{"cves":["CVE-2026-18662"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:12.357Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-phjh-v7c6-g7mv","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/210","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-phjh-v7c6-g7mv","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-19863","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-19863 — An unauthenticated client may access certain protected resources when using EthereumAuthenticator if…","description":"An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.\n\n\n\nThis is caused by the authenticator using an unanchored substring match when identifying the login page. If the login path appears later within…","indicators":{"cves":["CVE-2026-19863"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:12.497Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-6m7j-pjmp-crgq","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/230","label":"emo@eclipse.org","domainType":"other"},{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-6m7j-pjmp-crgq","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-19864","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-19864 — Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object.…","description":"Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext.\n\n\n\nA…","indicators":{"cves":["CVE-2026-19864"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:12.633Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-q6wx-j9wr-fj7f","label":"emo@eclipse.org","domainType":"primary"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/229","label":"emo@eclipse.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-34006","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-34006 — A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP…","description":"A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain access to the system.\n\nWe have already fixed the vulnerability in the following version:\nsMedio DTCP MOVE 1.4.5 and later","indicators":{"cves":["CVE-2026-34006"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:13.187Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=sMedio&app=sMedioDTCPServer&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-34007","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-34007 — An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the…","description":"An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.\n\nWe have already fixed the vulnerability in the following version:\nNotes Station 3 3.9.11 and later","indicators":{"cves":["CVE-2026-34007"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:13.320Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-34008","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-34008 — An incorrect permission assignment for critical resource vulnerability has been reported to affect N…","description":"An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.\n\nWe have already fixed the vulnerability in the following ve…","indicators":{"cves":["CVE-2026-34008"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:13.443Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-34009","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-34009 — An improper isolation or compartmentalization vulnerability has been reported to affect Notes Statio…","description":"An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.\n\nWe have already fixed the vulnerability in the following ver…","indicators":{"cves":["CVE-2026-34009"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:13.573Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-34014","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-34014 — An incorrect permission assignment for critical resource vulnerability has been reported to affect D…","description":"An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.\n\nWe have already fixed the vulnerability in the f…","indicators":{"cves":["CVE-2026-34014"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:13.697Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app_releasenotes/list.php?app_choose=DownloadStation","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-39989","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-39989 — A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If…","description":"A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data.\n\nWe have already fixed the vulnerability in the following version:\nDownload Station 5.10.1.312…","indicators":{"cves":["CVE-2026-39989"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:13.950Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app_releasenotes/list.php?app_choose=DownloadStation","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-39991","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-39991 — A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote…","description":"A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code.\n\nWe have already fixed the vulnerability in the following version:\nNotes Station 3 3.9.12 and later","indicators":{"cves":["CVE-2026-39991"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:14.073Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Notes%20Station%203&app=NotesStation3&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-39997","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-39997 — A missing authentication for critical function vulnerability has been reported to affect HybridDesk…","description":"A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system.\n\nWe have already fixed the vulnerability in the following version:\nHybridDesk Station 4.2.22 and lat…","indicators":{"cves":["CVE-2026-39997"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:14.197Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=HybridDesk%20Station&app=HD_Station&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-41541","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-41541 — An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. I…","description":"An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.\n\nWe have already fixed the vulnerability in the following version:\nQsync Cen…","indicators":{"cves":["CVE-2026-41541"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:14.327Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Qsync%20&app=QsyncServer&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-41545","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-41545 — A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker ga…","description":"A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nQuMagi…","indicators":{"cves":["CVE-2026-41545"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:14.457Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app_releasenotes/list.php?app_choose=qumagie","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-47786","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-47786 — An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited,…","description":"An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.\n\nWe have already fixed the vulnerability in the following version:\nHybridDesk Station 4.2.23 and later\nHybridDesk Station…","indicators":{"cves":["CVE-2026-47786"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:14.720Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=HybridDesk%20Station&app=HD_Station&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-47790","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-47790 — A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote at…","description":"A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code.\n\nWe have already fixed the vulnerability in the following version:\nQuFTP Service 1.4.6 and later\nQuFTP Se…","indicators":{"cves":["CVE-2026-47790"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:14.903Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=QuFTP%20Service&app=QuFTP&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-50612","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-50612 — An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a re…","description":"An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.\n\nWe have already fixed the vulnerability in the following version:\nQuMagie 2.9.2 a…","indicators":{"cves":["CVE-2026-50612"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.090Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app_releasenotes/list.php?app_choose=qumagie","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-50619","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-50619 — A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability c…","description":"A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data.\n\nWe have already fixed the vulnerability in the following version:\nQsirch 7.0.3.0 and later","indicators":{"cves":["CVE-2026-50619"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.220Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app-release-notes?keyword=Qsirch&app=Qsirch&product-line=nas","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-53882","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-53882 — An improper link resolution before file access ('link following') vulnerability has been reported to…","description":"An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.\n\nWe have already fixed the vulnerability in…","indicators":{"cves":["CVE-2026-53882"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:17:15.347Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://www.qnap.com/en/app_releasenotes/list.php?app_choose=QKVM","label":"security@qnapsecurity.com.tw","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-88794","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-88794 — Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger featu…","description":"Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's f…","indicators":{"cves":["CVE-2026-88794"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:13.837Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://cert.pl/en/posts/2026/10/CVE-2026-88794","label":"cvd@cert.pl","domainType":"other"},{"url":"https://sparxsystems.com/products/ea/","label":"cvd@cert.pl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98432","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98432 — In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: free inet_opt and ireq_opt after an RCU grace period\n\ntcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the\nchild socket (newinet->inet_opt) without copying it.\n\nAnother cpu can concurrently process a retransmit…","indicators":{"cves":["CVE-2026-98432"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:17:13.987Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://git.kernel.org/stable/c/11a03ce3c4a62d84c10ccdfe47f8075006498568","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/26d4c36d318cffbbd160884a0e4cec0da4da4936","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/742f73df544e03744f2981c467d6542fe8172a2a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/89b5b1eb7d633c33832b7ff2c02e19a144705036","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/95a8c8fa9f27dce64c40c41c062de7728bf34ab5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a47406c769f72c070386985488f1c4d057df86b2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b3b027ef0cd322bfa839b9aaf5b27551eea54cf6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e3f33b0a1d89d738e2b913dab519226eaf76e15b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104024","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104024 — Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archiv…","description":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitr…","indicators":{"cves":["CVE-2026-104024"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:17:13.553Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/peazip/PeaZip/commit/90ddbaee0945a4d8ffa4d972d43711bbfb9576ba","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"primary"},{"url":"https://secur0.com/en/cna/cve-list/cve-2026-104024-incomplete-extension-list-in-peazip","label":"4daa8cea-433a-44bd-9456-53b127fc289a","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103508","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103508 — P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on…","description":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search…","indicators":{"cves":["CVE-2026-103508"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:20.547Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://portal.perforce.com/s/cve/a91Qi000003GdOfIAK/path-traversal-via-logging-configuration-in-p4search","label":"security@puppet.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103509","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103509 — P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration…","description":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation.\nThis affects 2026.4.2 and earlier and is fixed in 2026.4.3.","indicators":{"cves":["CVE-2026-103509"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:20.757Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://portal.perforce.com/s/cve/a91Qi000003Gdi1IAC/credential-disclosure-in-p4-search-configuration-api","label":"security@puppet.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-104586","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104586 — AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.…","description":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","indicators":{"cves":["CVE-2026-104586"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:21.067Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/AmalJafarzade/CVE-2026-104586","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/AnoopAlias/AUTOM8N","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108082","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108082 — Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Pr…","description":"Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed header values with a pattern whose token alternative also matched whitespace, followed by a (?<!\\s) lookbehind. A run of…","indicators":{"cves":["CVE-2026-108082"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:22.583Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/symfony/symfony/pull/66048","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://github.com/symfony/symfony/pull/66491","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://symfony.com/blog/cve-2026-108082-redos-in-headerutils-split-reachable-through-the-cache-control-request-header","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109413","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109413 — In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\\Parser::lexInlineStructure…","description":"In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for every { and [ of an inline collection, without entering the nesting level that the rest of the parser bounds with maxNestingLevel. A…","indicators":{"cves":["CVE-2026-109413"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:24.993Z","fetchedAt":"2026-10-20T03:01:48.449Z","references":[{"url":"https://github.com/symfony/symfony/pull/65688","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://github.com/symfony/symfony/security/advisories/GHSA-2v3c-qxhr-7vpv","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://symfony.com/blog/cve-2026-109413-unbounded-recursion-in-the-yaml-inline-lexer-lets-a-single-document-crash-the-process","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-100349","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-100349 — kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateRes…","description":"kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateResponse passes a nil response header schema to decodeValue when an OpenAPI document declares the header with content instead of schema. The document passes validation, but every response validation for…","indicators":{"cves":["CVE-2026-100349"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:30.640Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/getkin/kin-openapi/commit/f5441d67f855ed34d975b3b85665764644ab1459","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-74vm-87hj-r66f","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105474","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105474 — A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote au…","description":"A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.","indicators":{"cves":["CVE-2026-105474"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:34.373Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://support.solusvm.com/hc/en-us/articles/44057968061591-CVE-2026-105474-Server-Side-Template-Injection-in-SolusVM-2","label":"support@hackerone.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109449","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109449 — In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of th…","description":"In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property accesses…","indicators":{"cves":["CVE-2026-109449"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:17:43.963Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/symfony/symfony/pull/65690","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://github.com/symfony/symfony/pull/66720","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://github.com/symfony/symfony/pull/66723","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://github.com/symfony/symfony/security/advisories/GHSA-7rpj-w9pf-39rr","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"primary"},{"url":"https://symfony.com/blog/cve-2026-109449-unbounded-nesting-in-the-expression-parser-lets-untrusted-expressions-crash-the-process","label":"596c5446-0ce5-4ba2-aa66-48b3b757a647","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-52167","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-52167 — A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause…","description":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","indicators":{"cves":["CVE-2026-52167"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:12.490Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://blog.facil.wtf/writeup-aoc-lc32d1320.html","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/teogabrielofc/libaoc","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-75505","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-75505 — EspoCRM is an open source customer relationship management application. Prior to 10.0.2, an authenti…","description":"EspoCRM is an open source customer relationship management application. Prior to 10.0.2, an authenticated user with mass-update permission can supply a known attachment identifier to the mass-update functionality. The mass-update processor duplicates the attachment without checking whether the calle…","indicators":{"cves":["CVE-2026-75505"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:20.103Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/espocrm/espocrm/commit/5be3e7ef2a010c151551a8bc277e9ca61e1503d4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/releases/tag/10.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/espocrm/espocrm/security/advisories/GHSA-24pg-2q7q-m5p6","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-88753","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-88753 — A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/ma…","description":"A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.","indicators":{"cves":["CVE-2026-88753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:22.887Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://gist.github.com/NanaSec/354b4188bbd7f4105008c7b8be49b0ba","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-97665","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-97665 — A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an acc…","description":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package…","indicators":{"cves":["CVE-2026-97665"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:25.490Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"},{"url":"https://support.sonatype.com/hc/en-us/articles/55793090807827/","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97666","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-97666 — Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled…","description":"Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code exe…","indicators":{"cves":["CVE-2026-97666"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:25.650Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"},{"url":"https://support.sonatype.com/hc/en-us/articles/56206649520147/","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97667","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-97667 — Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repos…","description":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permission…","indicators":{"cves":["CVE-2026-97667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:25.900Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"},{"url":"https://support.sonatype.com/hc/en-us/articles/56207477462035/","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-97712","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-97712 — Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to gr…","description":"Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.","indicators":{"cves":["CVE-2026-97712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:18:26.137Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"},{"url":"https://support.sonatype.com/hc/en-us/articles/56207076233619/","label":"103e4ec9-0a87-450b-af77-479448ddef11","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102527","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102527 — Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /_…","description":"Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /_og/d/*.png route accepts unsigned requests while resolvePathCacheKey() produces cache keys from the request path, site URL, and normalized rendering options exposed through image URLs and server respo…","indicators":{"cves":["CVE-2026-102527"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:08.973Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/nuxt-modules/og-image/commit/e6c5b53ce7f434ab8cbc91298dccfb2b515c56a5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nuxt-modules/og-image/pull/638","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nuxt-modules/og-image/releases/tag/v6.7.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/nuxt-modules/og-image/security/advisories/GHSA-2x6f-rp82-ppmj","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-102631","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102631 — In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves…","description":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provide…","indicators":{"cves":["CVE-2026-102631"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:10.130Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/authd/+bug/2168531","label":"security@ubuntu.com","domainType":"other"},{"url":"https://github.com/canonical/authd/pull/2067","label":"security@ubuntu.com","domainType":"primary"},{"url":"https://ubuntu.com/security/CVE-2026-102631","label":"security@ubuntu.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-57568","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-57568 — Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allow_unsafe_links. app/Http/Resources/Models/Utils/Preformatt…","indicators":{"cves":["CVE-2026-57568"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:23.880Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/f0604ead5889bfed404d6f5e1a9205f945172c7e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4377","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.6.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-pgfr-x389-5p2h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-57569","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-57569 — Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.php…","indicators":{"cves":["CVE-2026-57569"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:24.033Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/a5f23e314f1a933d31aa650616bf9cd84bd0407e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4344","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.6.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-vj35-v9x5-vrxh","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-vj35-v9x5-vrxh","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-61610","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-61610 — Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved() invokes SetPhotosHighlightedRequest::proc…","indicators":{"cves":["CVE-2026-61610"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:26.393Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/fe07567c176bbdcda7b276bb6d664dfcd47a9b00","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4449","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.6.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-qcqq-p4pq-7r77","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-61838","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-61838 — Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes albu…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes album and photo archives through AlbumPolicy::canDownload() and PhotoPolicy::canDownload() without first enforcing AlbumPolicy::canAccess(). For a public, password-protected album with grants_download ena…","indicators":{"cves":["CVE-2026-61838"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:26.677Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/4366dd0e721126dffe29659afec93aee9c1db711","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4459","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.6.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-735c-2wqc-x29r","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-735c-2wqc-x29r","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-62679","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-62679 — Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which ser…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default conf…","indicators":{"cves":["CVE-2026-62679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:26.820Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/f4553f6e0145ec4e02360c6121bd169e87b5d05f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4465","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.6.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-j5ff-34x8-xxqg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77466","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77466 — Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::get_supported_providers(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType a…","indicators":{"cves":["CVE-2026-77466"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:27.580Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/8b73656f920c682862b9199acc87fbaf72ee5a90","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4507","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.7.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-5wh2-hg7q-6hv3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-5wh2-hg7q-6hv3","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77467","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77467 — Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf(). An authenticated user who can upload a small PDF with an oversized /Media…","indicators":{"cves":["CVE-2026-77467"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:27.727Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/1e92846af4c2d259a225cf4517de17efba04f945","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4511","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.7.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-6736-fhxv-3p79","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77468","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77468 — Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scram…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAPI documentation configured by config/scramble.php to unauthenticated callers after installation, with observed response size and latency suggesting that the schema is regenerated w…","indicators":{"cves":["CVE-2026-77468"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:27.860Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/711f4290f53cd980cd5baa2434c734d364e9fe33","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4510","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.7.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-xg8r-4pm3-2h4f","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-77470","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-77470 — Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop PO…","description":"Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop POST /api/v2/Shop/Checkout/Process flow accepts an unrestricted additional_data array and CheckoutService::preparePurchaseParameters() merges it after server-computed purchase parameters. Because later…","indicators":{"cves":["CVE-2026-77470"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T17:17:27.997Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/LycheeOrg/Lychee/commit/24e6e11f1da131ed20b192d7d7b7ca9084451a2f","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/pull/4514","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/releases/tag/v7.7.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-476v-jr53-8rxc","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-476v-jr53-8rxc","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-104150","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-104150 — AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2…","description":"AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character classes. When an application applies this matcher to an attacker…","indicators":{"cves":["CVE-2026-104150"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:14.603Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/adonisjs/http-server/commit/86af38ca861528f673dcac6a4806197de038d1f7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/adonisjs/http-server/commit/d8c749aa9f66d5d214bad1cad727264aef4be727","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/adonisjs/http-server/releases/tag/v8.2.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/adonisjs/http-server/releases/tag/v9.1.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/adonisjs/http-server/security/advisories/GHSA-524c-h47v-m3h8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105660","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105660 — Improper Validation of Syntactic Correctness of Input vulnerability in mtrudel bandit allows an unau…","description":"Improper Validation of Syntactic Correctness of Input vulnerability in mtrudel bandit allows an unauthenticated remote attacker to set conn.host and conn.port to values outside the RFC 3986 host grammar via the authority of an HTTP/1 absolute-form or authority-form request target. Bandit validates t…","indicators":{"cves":["CVE-2026-105660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:16.290Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://cna.erlef.org/cves/CVE-2026-105660.html","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://github.com/mtrudel/bandit/commit/0e3edda0edf6322e9164b827c6d3ddecd080ff2e","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/mtrudel/bandit/commit/6ea80210137b3f69caf65f67398934259dc365d0","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://github.com/mtrudel/bandit/security/advisories/GHSA-v53v-9hvg-37jf","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"primary"},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-105660","label":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","domainType":"other"},{"url":"https://github.com/mtrudel/bandit/security/advisories/GHSA-v53v-9hvg-37jf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108126","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108126 — temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encry…","description":"temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption key by an identifier stored in the payload rather than by the namespace of the request, and nothing in the ciphertext rec…","indicators":{"cves":["CVE-2026-108126"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:19.873Z","fetchedAt":"2026-10-20T03:01:48.450Z","references":[{"url":"https://github.com/temporalio/temporal-proxy/blob/v0.8.0/pkg/crypto/dek.go#L54-L67","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/blob/v0.8.0/pkg/crypto/kek.go#L172-L180","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/blob/v0.8.0/pkg/crypto/vault.go#L256","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/commit/508991c298b9ac31915dd7349ffa88d79fad3475","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/commit/6843a2c4626aa2c7f00fbf54e4e9fa98f6254f07","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/discussions/146","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/pull/221","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/pull/222","label":"security@temporal.io","domainType":"primary"},{"url":"https://github.com/temporalio/temporal-proxy/releases/tag/v0.9.0","label":"security@temporal.io","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-45165","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-45165 — An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privi…","description":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access contro…","indicators":{"cves":["CVE-2026-45165"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:38.653Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://docs.cyberark.com/secrets-manager-sh/13.9/en/content/enterprise/releasenotes/release-notes-13.9.1.htm?tocpath=Get%20started%7CRelease%20Notes%7C_____3","label":"psirt@paloaltonetworks.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-47218","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-47218 — runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, container…","description":"runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker wh…","indicators":{"cves":["CVE-2026-47218"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:39.257Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/containerd/runwasi/commit/d28ab73c2c8a6c50d1927078821bd418b9e51638","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/containerd/runwasi/releases/tag/containerd-shim-wasmtime/v0.6.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/containerd/runwasi/security/advisories/GHSA-cc25-vq59-rcjx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-63430","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-63430 — ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.…","description":"ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit mutation cross-site scripting. ammonia do…","indicators":{"cves":["CVE-2026-63430"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T19:17:42.367Z","fetchedAt":"2026-10-20T03:01:48.451Z","references":[{"url":"https://github.com/rust-ammonia/ammonia/commit/004bf2cee4288f74a6ee619d589e3e90c24c09ca","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/commit/7ac3fd3145236f28857eeecbadb544c8659cba31","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/commit/b51bf4f9749ed3cd518330105f20a2c39c9ee274","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/pull/243","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/pull/244","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/pull/245","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/releases/tag/v3.3.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/releases/tag/v4.0.2","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/releases/tag/v4.1.3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/rust-ammonia/ammonia/security/advisories/GHSA-9jh8-v38h-cvhr","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://ivan09999.github.io/ammonia-mxss","label":"security-advisories@github.com","domainType":"other"},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0193.html","label":"security-advisories@github.com","domainType":"other"},{"url":"https://github.com/rust-ammonia/ammonia/security/advisories/GHSA-9jh8-v38h-cvhr","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-105227","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105227 — This vulnerability allows remote attackers to disclose sensitive information on affected installatio…","description":"This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.","indicators":{"cves":["CVE-2026-105227","CVE-2026-105228"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:17:58.357Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf","label":"759f5e80-c8e1-4224-bead-956d7b33c98b","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109812","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109812 — A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa'…","description":"A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the dis…","indicators":{"cves":["CVE-2026-109812"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:02.120Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products","label":"psirt@moxa.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-109813","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-109813 — A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's indus…","description":"A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network access could exploit the exposed private key material to compromise the confidentiality and integrity of communications.","indicators":{"cves":["CVE-2026-109813"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T03:18:02.277Z","fetchedAt":"2026-10-20T03:01:48.452Z","references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-262560-cve-2026-109812,-cve-2026-109813-vulnerabilities-in-industrial-computing-products","label":"psirt@moxa.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111442","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111442 — Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploa…","description":"Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images can contain clickable links or executable scripting. By uploading a crafted SVG, it is possible to execute scripting in th…","indicators":{"cves":["CVE-2026-111442"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:18:29.820Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://backdropcms.org/security/backdrop-sa-core-2026-007","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111458","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111458 — The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting F…","description":"The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in ad…","indicators":{"cves":["CVE-2026-111458"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:17:09.510Z","fetchedAt":"2026-10-20T03:01:48.453Z","references":[{"url":"https://github.com/adulau/ssldump/commit/8ad55683cc0186600c085d33be5a5b627db78467","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-101300","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-101300 — Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of We…","description":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the <svg> parameter of the POST request generated by selecting Download PDF. The content is processed by the…","indicators":{"cves":["CVE-2026-101300"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:03.703Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/server-side-request-forgery-wegow-pdf-export","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111472","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111472 — An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an…","description":"An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.","indicators":{"cves":["CVE-2026-111472"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:17:04.410Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-tsg-profleet","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-106030","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-106030 — NordVPN for Windows allows local attackers to stop unprotected Windows system services and change th…","description":"NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application allows a low-privileged attacker to act as a trusted process and connect to the named pipe \"\\\\.\\pipe\\nord-security\\v1\\Nord…","indicators":{"cves":["CVE-2026-106030"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:18:03.327Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://cert.pl/en/posts/2026/10/CVE-2026-106030","label":"cvd@cert.pl","domainType":"other"},{"url":"https://nordvpn.com/","label":"cvd@cert.pl","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-14452","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-14452 — Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.…","description":"Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script in the session of an authenticated user with Setup access, or to redirect that user to an arbitrary external site, by t…","indicators":{"cves":["CVE-2026-14452"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:18:05.653Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://checkmk.com/werk/22314","label":"security@checkmk.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-63619","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-63619 — Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough a…","description":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis i…","indicators":{"cves":["CVE-2026-63619"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:57.250Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://lists.apache.org/thread.html/p3rzz43h1kqc55wjshxmx2dbbmx76qrg","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/2","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-64610","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-64610 — Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could h…","description":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service.\n\n\n\nThis issue affects Apache Kylin: from 4 through 5.0.4.\n\n\n\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.","indicators":{"cves":["CVE-2026-64610"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:57.367Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://lists.apache.org/thread.html/5jwj20t50wc6x9pw0zmlj8tzfl37dpry","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/3","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-64959","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-64959 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authen…","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly…","indicators":{"cves":["CVE-2026-64959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:16:57.480Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://lists.apache.org/thread.html/oho4tw8kvxkybwpjykzl49zx6o17tkdt","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/4","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111593","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111593 — Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips f…","description":"Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the reported behaviour was determined not to be a vulnerability: the Shop Manager role that could invoke the bulk invoice deletio…","indicators":{"cves":["CVE-2026-111593"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:17:23.840Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[],"feedLabel":null},{"id":"nvd-CVE-2025-52097","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-52097 — Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to…","description":"Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding","indicators":{"cves":["CVE-2025-52097"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:16:50.360Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"http://instantasp.com","label":"cve@mitre.org","domainType":"other"},{"url":"http://instantforumnet.com","label":"cve@mitre.org","domainType":"other"},{"url":"https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-26846","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-26846 — Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attac…","description":"Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component","indicators":{"cves":["CVE-2026-26846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:17:06.357Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/HMI/weintek_rce/weintek_rce.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://www.weinview.cn/rj#content","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-55543","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-55543 — TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set g…","description":"TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker-supplied class stored in that archive. W…","indicators":{"cves":["CVE-2026-55543"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:18:43.750Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/helge17/tuxguitar/commit/a7eef20e2e02ee454597d42c295327d9f098c636","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/helge17/tuxguitar/releases/tag/2.1.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/helge17/tuxguitar/security/advisories/GHSA-v66p-c82h-w3cq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-95859","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-95859 — libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.…","description":"libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling unconditionally adds attacker-supplied topic hashes to connected_peer.topics without confirming that the peer previously subscribed to those topics. A re…","indicators":{"cves":["CVE-2026-95859"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:22:44.400Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/libp2p/rust-libp2p/commit/51ed5f00e1b0620ded3444ecadf18477052148ea","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/libp2p/rust-libp2p/pull/6608","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/libp2p/rust-libp2p/security/advisories/GHSA-g3g5-x568-qvqx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-86009","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86009 — Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61b…","description":"Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not control. A potentially malicious domain administrator enables spoofing for another hosted domain and can send emails tha…","indicators":{"cves":["CVE-2026-86009"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:17:51.920Z","fetchedAt":"2026-10-20T03:01:48.454Z","references":[{"url":"https://github.com/Mailu/Mailu/commit/f05aeb8322e2f61096af6b089d61ba6f40587d96","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Mailu/Mailu/issues/2686","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Mailu/Mailu/pull/4072","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/Mailu/Mailu/security/advisories/GHSA-crww-m82r-2wfm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-55640","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-55640 — A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allo…","description":"A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.","indicators":{"cves":["CVE-2025-55640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:16:56.243Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/gpac/gpac/commit/321624f28d19a413449fd1718d1eb59037f8f7fc","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3261","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/25/25_poc.mp4","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/116769271709415444","label":"cve@mitre.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/17/2","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-55653","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-55653 — GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function…","description":"GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Processing a crafted MP4 file containing a zero-denominator fraction string causes gf_parse_lfrac() to divide by zero, terminating the process with SIGFPE.","indicators":{"cves":["CVE-2025-55653"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:16:57.013Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/gpac/gpac/commit/4bbb6e5","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3247","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/116769079013422405","label":"cve@mitre.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/17/4","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-66969","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-66969 — Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","description":"Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","indicators":{"cves":["CVE-2025-66969"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:16:57.160Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Application/openmodsim/openmodsim.md","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/sanny32","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/sanny32/OpenModSim","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108709","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108709 — Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services tha…","description":"Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis issue affects Apache Kylin: from 4.0.4 through 5.0.4.\n\n\n\nUsers are recommende…","indicators":{"cves":["CVE-2026-108709"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:18.943Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://lists.apache.org/thread.html/okkvcvoj1007f6cxhwp9v6j6t4ynfnwb","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/11","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-68572","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-68572 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. This issue…","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin.\n\n\n\nThis issue affects Apache Kylin: from 4 through 5.0.4.\n\n\n\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.","indicators":{"cves":["CVE-2026-68572"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:24.120Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://lists.apache.org/thread.html/r0boyqp211s7316oclh666bq40vbs9n7","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/6","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-68573","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-68573 — Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cle…","description":"Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. \n\n\n\nThis issue affects Apache Kyli…","indicators":{"cves":["CVE-2026-68573"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:24.233Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://lists.apache.org/thread.html/4n3qt477rtvwnko2olb3hjwjll1yry8j","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/7","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-69076","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-69076 — Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the k…","description":"Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis issue affects Apache Kylin: from 4 through 5.0.4.\n\n\n\nUsers a…","indicators":{"cves":["CVE-2026-69076"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:24.343Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://lists.apache.org/thread.html/w4cpyg5q4h2152bx9zmbh739skwqm35h","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/8","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-69077","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-69077 — Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most t…","description":"Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis issue affects Apache Kylin: from 4 through 5.0.4.…","indicators":{"cves":["CVE-2026-69077"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:24.450Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://lists.apache.org/thread.html/wcc7w3lbhfcgb51p867shv1d513z7x1t","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/9","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-69080","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-69080 — Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affect…","description":"Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin.\n\n\n\nThis issue affects Apache Kylin: from 4 through 5.0.4.\n\n\n\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.","indicators":{"cves":["CVE-2026-69080"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:17:24.560Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://lists.apache.org/thread.html/zrt6z545y8z9qtsbyzfy55sdpf75osnp","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/10","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-96620","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-96620 — Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to t…","description":"Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causing a…","indicators":{"cves":["CVE-2026-96620"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:18:28.293Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/anthropics/claude-agent-sdk-python/commit/347a1cb88d7652199399db1b7f914e0a459a6662","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anthropics/claude-agent-sdk-python/pull/1123","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.121","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/anthropics/claude-agent-sdk-python/security/advisories/GHSA-h4mw-j7qp-8mwm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108372","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108372 — Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loo…","description":"Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` and `do_OPTIONS()` to send `Access-Control-Allow-Origin: *` for…","indicators":{"cves":["CVE-2026-108372"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T22:17:14.457Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/loopx-project/loopx/commit/838720fba42bd22f71b5bb763ec406f7bdf4c940","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/loopx-project/loopx/pull/3137","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/loopx-project/loopx/releases/tag/v0.4.5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/loopx-project/loopx/security/advisories/GHSA-vx2m-gpq4-8j5q","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-110752","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110752 — Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index…","description":"Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment.\n\nfragment expands a row= or col= selector into an array with one element per selected index before it reads any data, and it does not clamp an explicit end column…","indicators":{"cves":["CVE-2026-110752"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:00.410Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/d9d3d66f9ff6a8a1bc255a6ef05100f9b102b92b.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110753","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110753 — Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables…","description":"Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline.\n\nWith bind_columns, the parser writes each field into the caller's own scalar without taking a reference to it. When skip_empty_rows skips an empt…","indicators":{"cves":["CVE-2026-110753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:00.530Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/f082d5c8aab1b8d16b6181d4f3042a06947e260f.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110754","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110754 — Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in…","description":"Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline.\n\ngetline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never free…","indicators":{"cves":["CVE-2026-110754"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:00.637Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/eb4f739ffc605bfb1ab710e5330704faa0e89f08.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110755","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110755 — Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder…","description":"Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline.\n\nWith eol unset, the default, getline reads with Perl's default line separator, so input with CR-only line endings arrives as one chunk. After each record the…","indicators":{"cves":["CVE-2026-110755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:00.740Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/f25e00aacd6fc15857b22487cb2e5ca263f377e0.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110756","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110756 — Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8…","description":"Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print.\n\nWhen a record contains a UTF-8 flagged field, print holds back trailing bytes that are not valid UTF-8 at each buffer flush, so that a character…","indicators":{"cves":["CVE-2026-110756"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:00.847Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/0610a8d81262ae6f1ac82a88d73c8a471f38af19.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110757","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110757 — Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers…","description":"Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine.\n\ncombine and print do not check whether a field needs quotes when its value has Perl's integer or numeric flag set. Perl sets these flags on a string used in a numeric oper…","indicators":{"cves":["CVE-2026-110757"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:00.953Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/fcfb796cb50de9cef8b94a70535304ac41a50c56.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110758","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110758 — Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_w…","description":"Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace.\n\nUnder allow_whitespace, strip_trail_whitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field o…","indicators":{"cves":["CVE-2026-110758"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:01.057Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/efed7ee21177c59a5b69e787f84154e1fcb0d095.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110759","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110759 — Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty…","description":"Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse.\n\nWhen the input to parse ends in a separator and a lone CR, the parser treats the end of the input as the next character and stores the end-of-file marker in…","indicators":{"cves":["CVE-2026-110759"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T23:17:01.170Z","fetchedAt":"2026-10-20T03:01:48.455Z","references":[{"url":"https://github.com/cpan-authors/Text-CSV_XS/commit/7627f1a2bb8ffe4e81d9847318a060822043f7f3.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/HMBRAND/Text-CSV_XS-1.65/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111997","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111997 — ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and…","description":"ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.","indicators":{"cves":["CVE-2026-111997"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T01:16:35.463Z","fetchedAt":"2026-10-20T03:01:48.456Z","references":[{"url":"https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rxp7-6hxx-x8q5","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rxp7-6hxx-x8q5","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-78497","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-78497 — JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by…","description":"JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval.\n\nThe pattern given to test(), match(), or the match and =~ conditions of select() is placed in a `qr'...'` literal and compiled as source text, so a `(?{ ... })` code b…","indicators":{"cves":["CVE-2026-78497"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T12:17:15.350Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://github.com/kawamurashingo/JQ-Lite/commit/c461721ae3d5a90d6d94dbb234c1b8dfee5c1769.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/SHINGO/JQ-Lite-2.51/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/18/3","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98433","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98433 — In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure\n\nIn kvmppc_svm_page_in(), if uv_page_in() fails after\nkvmppc_uvmem_get_page() has succeeded, the secure device page is never\nreleased.  kvmppc_uvmem_get_page(…","indicators":{"cves":["CVE-2026-98433"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:53.047Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/0a416ee20bcccddf91ca5b63696a23b9d11d73aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8f3b7746874b39fc20e0363c9076c7787d4765ba","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a933d7024359e2e566b07903d1294b84f90482ae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c41088b2765af1e97e7bb05f906ae1823eca0388","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dfb84274932737e338ff5eb27f34b4c8ecb01b50","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ed2f2ff63cb7e71204096e765c6d02c3b6974b95","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f3d4b2fc30c97cf8e6f8b880d2de9c17ecac7f5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fcbff8008b0e08cd53b611bd0ff7e01f5b962f80","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98434","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98434 — In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_doin…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsysctl: Check range in  proc_dointvec_ms_jiffies_minmax\n\nAdd the range check to do_proc_int_conv_ms_jiffies_minmax that commit\nd174174c6776 (\"sysctl: replace SYSCTL_INT_CONV_CUSTOM macro with\nfunctions\") incorrectly removed.","indicators":{"cves":["CVE-2026-98434"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:53.200Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1c23dba51dbf7e86c7c2e617c964be1411329cb4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/82431877d837a6c2593efd8e66ba28b35a220ca4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98435","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98435 — In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/altera: Use parent device for devres in altr_portb_setup()\n\nAnchor the devres group and the devm-managed IRQ requests in altr_portb_setup()\nto the actual parent device (device->edac->dev) instead of the embedded struct\ndevice…","indicators":{"cves":["CVE-2026-98435"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:53.300Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/2cf03ada03532bfb42f06fbf01d9e2a99e6011d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8325ecf3f16d764a0e0ba42c95b63f08e38710a8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9868f5c077dfe0b606331f2e782484f91a5789a5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dc4797c909b6cacb1bb24449e6c57d50a14d73bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98436","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98436 — In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device bu…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\naccel/amdxdna: Disable device buffer exporting\n\nDevice buffers are never intended to be exported. Disable exporting\nsupport explicitly.","indicators":{"cves":["CVE-2026-98436"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:53.397Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/33b00fa8023e8ade3409aa9c833b8ce65b8c29eb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9480dd7ec3fcadd4217503e4bb32c16e19e4b21f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98437","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98437 — In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime P…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: qcom: iris: fix runtime PM reference leaks\n\nUse pm_runtime_resume_and_get() in iris_enable_power_domains()\nto avoid leaking a runtime PM usage count on failure.\n\nAlso ensure pm_runtime_put_sync() is always called in\niris_dis…","indicators":{"cves":["CVE-2026-98437"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:53.490Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/7a52e76b63095e05d92f15f16f45421cab9789e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f87d7eda07fca21efe4b96169ae59007db46e60e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fff1ae8d0c8c97668e4cbcc6e1fd2cc740013795","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98438","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98438 — In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: options: fix uninit-value in mptcp_write_data_fin\n\nWhen sending a DATA_FIN without data, and because the DATA_FIN occupies\n1 octet of the connection-level sequence space [1], it is then required\nto add a DSS mapping with spe…","indicators":{"cves":["CVE-2026-98438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:53.590Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/9a682067dd7b9dce6b94a0a05661dcc921446402","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b110f1dd6cb6a9930503354a01a315e0a821eaa7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98439","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98439 — In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async request…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/server: cancel async requests when closing connection\n\nAn async request may still be waiting when a connection is closed.\nThis can stop the connection from closing.\n\nCancel active async requests before waiting for them to finis…","indicators":{"cves":["CVE-2026-98439"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T15:16:53.687Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/0947087678f465b64eba2acebe808d5c6cfea036","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4fd5bad647bfa45eb86bfd2f03ba1bef3fcd5851","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98440","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98440 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction\n\nWe free the shadow S2 structures from kvm_arch_flush_shadow_all(), which\nis a Bad Idea(tm). Freeing the page tables is fair game (this is what\nthis callbac…","indicators":{"cves":["CVE-2026-98440"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:54.287Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/22e82acec93a681071ed36f70eabe2d0c4e0bebd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5bf1c9175e657b3c2dc1cf77403031ac7aadcf66","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/876049f026b4dfaca0cc78ec81be0e639ca8525d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e5843f4effaa2ffac3e789ecd4456403564961d4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98441","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98441 — In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifyi…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ct: avoid modifying shared unconfirmed ct entry\n\nIn a case where skb with an unconfirmed ct entry gets cloned, we may\nend up processing both again but with different sets of extensions.\n\nThe series of events:\n\n 1. Th…","indicators":{"cves":["CVE-2026-98441"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:54.393Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/2b783c562c3238ff50c34fd7a72a735c9cc73d9a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4a04ed91575819fb1859311113e95700b709bec7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b097d9d7a5b09c8ec5c4c1a08e35ac5a66b06b44","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f85009dfcd65e5969526b0db7a49b5413746e630","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98442","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98442 — In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UA…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ct: fix helper UAF due to extensions realloc\n\nWhile calling the helpers, a raw pointer to the extensions area is\nwired into expectations list:\n\n  -> nf_ct_helper()\n   -> helper->help()\n    -> nf_ct_expect_related_rep…","indicators":{"cves":["CVE-2026-98442"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:54.503Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1679bbf5fbeac52a310b1a58b2b301bbf388bdbf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/812c16a255e7773a544e88b39ae6daed25544d30","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8988f4d11f3fba0ab38122178836c683ad516a05","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dad19b59da050cb60d3f7023dac2a042a84bf0bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98443","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98443 — In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer hand…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix cursor and pointer handling when recovering iunlink buckets\n\nLOLLM pointed out a bug in xlog_recover_iunlink_bucket:\n\n1. We don't null out prev_ip after releasing it, which can lead to UAF\n   problems if the inodegc flush…","indicators":{"cves":["CVE-2026-98443"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:54.620Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/65f39d09d73718611cee40399179323b5d4ead00","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/66a2179d02668f8df44b1a249899006f3ba38ea0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8c9d5b8a96d6b93eb24e07b4163c89341ba29bd1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/961c717e6bf0e53c2c2b1fe4aef1add9390fedab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98444","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98444 — In the Linux kernel, the following vulnerability has been resolved: xfs: drop dquot flush lock when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: drop dquot flush lock when we can't find a buffer to flush\n\nLOLLM noticed that xfs_qm_flush_one fails to drop the dquot flush lock\nif it can't grab the buffer associated with the dquot.  Since there's no\nbuffer, nobody else is…","indicators":{"cves":["CVE-2026-98444"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:54.737Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/41bc624377f08125eae164c62ce043791ade93b7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ffb48dccce1960a9ea24463a2f3c21d124d6b672","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98445","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98445 — In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures l…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't let memory failures leak blocks and kill repairs\n\nLOLLM complains that a memory allocation failure in\nxrep_newbt_add_blocks results in online repair leaking blocks that were\npreviously allocated to write a new btree, but…","indicators":{"cves":["CVE-2026-98445"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:54.837Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/0e0d3372a84029da1768c7a4c4601484af5b58a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3380151cf0ce8ad0c1d356fed51e4b69e1d28e50","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ab1c416d2377cdc16123ef521aac4da1c468c3d4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b15c79fca28060fd9c7e77f2c3ebc4ba023974e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98446","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98446 — In the Linux kernel, the following vulnerability has been resolved: xfs: don't let hidden_space go n…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: don't let hidden_space go negative in xfs_metafile_resv_init\n\nLOLLM points out that if the amount of fdblocks that we can reserve for\na metadata btree file goes below the space already used by that file,\nthen the hidden_space…","indicators":{"cves":["CVE-2026-98446"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:54.937Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/476582d754cdc5110f806001417fea6c77824c13","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/930a9c1c321efdaa3e7f8caecb0479cee3baf342","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f0d8352a39f4a2e329ae45b71bb0d49e2ca0a6dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98447","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98447 — In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots\n\nLOLLM noticed that the inode btree root formatting methods copy too many\nbytes -- there's only one set of keys in node blocks, not two.  This\ncauses memory…","indicators":{"cves":["CVE-2026-98447"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.037Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/2703b954d306ebfe3b11e33e259759329c11b690","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d46492fb8018d12d00651b06b9d240e747110b38","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fe2f9135df43db849e74f03956d322ac20b59af7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98448","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98448 — In the Linux kernel, the following vulnerability has been resolved: xfs: release orphanage dir inode…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: release orphanage dir inode if chown fails\n\nLOLLM points out that we leak the igrab'd reference to the orphanage\ndirectory inode if chowning it fails.  Fix that.","indicators":{"cves":["CVE-2026-98448"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.140Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1c32cdc986467eaffeedb6c5334852809555b82d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6a65a68097a1903988b256d5b367da7b0863a1d5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6b66b1a59df6c3f9b4ad9b39a32ca86170ade357","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f813aefd9e09c8cda38a71580b6a01552d97cade","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98449","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98449 — In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mid…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: delete compound mids on send failure before unlock\n\nWhen sending a compound request fails, smb_send_rqst() kicks off a\nreconnect. compound_send_recv() still has those mids on pending_mid_q,\nbut it unlocks the server wi…","indicators":{"cves":["CVE-2026-98449"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.237Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/70783946f3b5d0c06ec7df0f5e7bec2bfad24efb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8f6f8a48399f82f4a83f7b9f25b9707e0062a4f9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98450","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98450 — In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed cre…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: close completed creates on compound wait errors\n\ncompound_send_recv() waits for responses in order. If a later wait is\ninterrupted, or if a later MID fails during response synchronization, an\nearlier CREATE may already…","indicators":{"cves":["CVE-2026-98450"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.333Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/224b56b7c02b2bfb1f5bee18d5f56ae6b052be44","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/253612499ce9b4cd7bb922fe507ec204bddd9313","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2cb07d1a6a30283dbfc809c8036bc1fd103d59fa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6c5c547f037bc18f0b8d0b5db5a648f8f630ce85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98451","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98451 — In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open(…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: use finish_no_open() for non-regular inodes\n\nAn O_CREAT open can find an existing symlink or another non-regular\ninode. cifs_atomic_open() calls finish_open() on it and attaches a\ncifsFileInfo. Symlink inodes have no C…","indicators":{"cves":["CVE-2026-98451"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.437Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/3c07deb26273155c180aedfd9041ab58015d2521","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/70a7918fda54a06d836acc91eb9a3c7e860fe0a0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e66cf1625ec4a3fe68346119f371def713fd0a4d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ed03d547598c92a036f20e89156540995cac889a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98452","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98452 — In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cac…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clean up failed cached directory opens\n\nopen_cached_dir() sends CREATE and QUERY_INFO as a compound request. If\nthe CREATE succeeds but a later command returns an error, the function\nmust retain the CREATE FID so commo…","indicators":{"cves":["CVE-2026-98452"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.537Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/48958ddda3d7eee3600261e2d90671f63e055dc4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7c1509598a4fdfb54cb09ce33e4405bd6dbd8295","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/abab661eed00fa102d3c35ddf1cce4f687e718c1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2ff5fb93ea83034025850266b5eed391f96b825","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98453","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98453 — In the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: close handle after create-context parsing failure\n\nSMB2_open() accounts a successful CREATE response as a remote open before\nparsing its create contexts.  If smb2_parse_contexts() rejects malformed\ncontext data, SMB2_o…","indicators":{"cves":["CVE-2026-98453"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.647Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/566820af017e81497fb5e9d3ad6e7ffe2828bc8b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/80c67cc71d32ccafc89a29b669243b40d81b930f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cdb36b09fb1f86d638d0afb44d621ed3f7c1d8eb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f09875ff901e933e7b22c913daf51d21e9d93a45","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98454","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98454 — In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix create context out-of-bounds reads\n\nsmb2_parse_contexts() validates the complete create-context area but\ndoes not limit each record to its Next field before dispatching it.  A\nmalformed chain can therefore expose b…","indicators":{"cves":["CVE-2026-98454"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:55.757Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/05a7fd80024ff32b9b40ab1478bb172eeab1c386","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/28bc9a871799363afa3139e961a8e3684feb8704","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/67f4c1c6a1b51e203d986779299824d1c2c590a6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cecc5399987e73a528ce2b662eeb54af69163cbd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e4c49012708c917eafd9c27054b02d0f8b30fe64","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98456","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98456 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in rea…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: mgmt: fix race in read_unconf_index_list()\n\nread_unconf_index_list() counts unconfigured controllers before allocating\nits response, then checks the device flags again while filling it.\n\nhci_dev_list_lock stabilizes list…","indicators":{"cves":["CVE-2026-98456"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.003Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/2e8bba0360d1379bfa8da47c8f5dadbb10a3fba1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/416546cd6a54e9b68f2b91bc680b1ee17dcd77a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/524e0450dd9a396f99a81b045219b0e2ea0dab57","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8ddf962c76432a10a6cb80042875cbc48a9c056b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b5dbb41b212c50c095a4dbee3017a84fe94f033b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98457","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98457 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate frame…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: validate frame length before control and FCS access\n\nl2cap_data_rcv() unpacks either a two-byte or four-byte control field\nwithout first ensuring that it is present. A short ERTM or streaming-mode\nframe can theref…","indicators":{"cves":["CVE-2026-98457"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.110Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1fdbb2a712a9a162ee817c959740face80b3d929","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3acf6a0038ec0d4e8f4dcbfc2a557dff5f61cb70","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4373ba79a267947e771c438507f7b103e30bdb21","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6c78a213d9070b610c7f418af2c25b66180b7e37","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8c7556c7cd17e073bbefdc4a9a4694a207544c37","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/965bd88ed4b4763cb765dd65885adcfa588c6b14","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c6a288e6001bcce16553c3853e0f5a45eaaf85c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f557274af7b94b6134692e6f26b880f1e34c15bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98458","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98458 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: release unused C…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: release unused CIS holds after channel attach\n\nhci_bind_cis() and hci_connect_cis() return one hci_conn hold for the\nISO layer.  A new channel association consumes that hold, which is\neventually released by iso_conn…","indicators":{"cves":["CVE-2026-98458"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.230Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/0fcd4dad555c96e0bd3a1b8c569f989be85c7341","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e0e8b70207eaf27aee0a05ec5bf2d1b6bcb004d1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e5fcca51177f224604e3a8c926ffd5edbeb58b09","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ed4c026cc4094dfb7a329b9d8df0ddd0be1b2458","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98459","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98459 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: balance the pare…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: balance the parent hold in hci_bind_bis()\n\nhci_conn_link() takes a lifetime reference to its parent with\nhci_conn_get(), but only takes an operational hold on the child.\nhci_conn_unlink() later balances both a hold…","indicators":{"cves":["CVE-2026-98459"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.327Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/03a91cdf6862fb351a74f035ad21e70112438552","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4c94557dd02569efa6c1072a0439addaef9a5224","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4e49206d9574a4c109480198e73aea34ad0ed7f6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bbcd723ee7a84bc868142fd57717af88e54e555a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ff28e6c67143c76ef50c3eac01f2fad411705f71","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98460","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98460 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: reject out-…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: reject out-of-range OCF values\n\nThe raw HCI socket security filter has 128 OCF bits per supported OGF,\nbut masks the 10-bit OCF with 127 before looking up the command. An\nunprivileged socket can therefore submi…","indicators":{"cves":["CVE-2026-98460"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.430Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/173457fa3e99ef4188dd0fe63e4dee98d0e441a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/320dedad15e8bbaecc8d2d7fd4189defb84caa85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/47d67ec424e63e61e9eb58633d43a9d58a1852b6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/598686f5d65b9af2223ed9d22fadba16e09f6ca8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/68f0bcc4e16e31ff8dbe6ca93116eb70d7b6ac44","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/70b0a27bdde0cb524349c8261202c7c9393cf5e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c1fd465ea1c5aef459f9bc3ac602b5353e0f536f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e93fad891c72deb84cae49430163b384ebcc92b1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98461","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98461 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: validate ev…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: validate event length before filtering\n\nis_filtered_packet() reads the event code from skb->data[0] without first\nchecking that the skb is nonempty. When an opcode filter is configured,\nit also reads the comman…","indicators":{"cves":["CVE-2026-98461"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.543Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1a92763c2ba721bf113cd83f913fe8c511b4a4dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2501a3b7b7144d1d11939b355a48ed01f83d0c62","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3976bbcd43b9b94c53ac9b0fd28888011588f4cc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/39e99d85071bca0feeec3164a9437ca1bff297fc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0a6cf99afd57a39598b1beca0e86ef5004980de","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dca25c204f71be0556a15177dbe037237ac43e5e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ebdd49cec380731844ed9df4092a29a014623df4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f894f6292d5122cd62d30600736b4a0ae79f7770","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98462","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98462 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix CIS hol…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_conn: fix CIS hold ownership on reuse\n\nCommit 69997d50ec57 (\"Bluetooth: ISO: handle bound CIS cleanup via\nhci_conn\") made hci_bind_cis() and hci_connect_cis() return a\nconnection with one hold for the ISO layer.  hci…","indicators":{"cves":["CVE-2026-98462"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.660Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/072bc8659f22566083f8eef7dc5903bbcaf7804a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/10f959cb435217b4b407864e5be0eb779e389490","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3ff5a8d949e3a2a435d0a5ee05074cd371b0158a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/947eb2f41f70d371eb16897ee4e8e32bff73b476","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e06d549fcd4a0ba381ed67ddf1ab3c7a6ca4314c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98463","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98463 — In the Linux kernel, the following vulnerability has been resolved: sched_ext: Derive SCX_RQ_IN_WAKE…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags\n\nschedule_deferred_locked() skips scheduling a deferred action while\nSCX_RQ_IN_WAKEUP is set and relies on the task_woken_scx() call that follows\na wakeup enqueue to ru…","indicators":{"cves":["CVE-2026-98463"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.770Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/3fdf2ceb31e8aff77451e468bc8409e10587916a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6c401ae426e20e53a3398a8e79afd0964c0f5110","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/df5cdc2c832ca4e8a6d774596b9005558761a403","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98464","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98464 — In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRISC-V: KVM: Synchronize hrtimer callback during teardown\n\nThe non-Sstc hrtimer callback clears next_set before its final uses of\nthe enclosing vCPU.  If teardown observes next_set as false while the\ncallback is still running, kvm_…","indicators":{"cves":["CVE-2026-98464"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.873Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/2af03b606aadaaeb386658ef798c79bdcdef87c1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3cc6184bd5920c9685d87f4e260568feba08650d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9bdbae64ae0dab93041ebc57ec4e93def793fc2d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aaad136d56d91252517272b68cd533e5714698d5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e66aced74f0122380603c9910a71d77618b28f0e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ea91f05a55b807ead3166546a2c75f4185ca645f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98465","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98465 — In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC att…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nRISC-V: KVM: Serialize IMSIC attributes with vCPU migration\n\nKVM device ioctls are not serialized against KVM_RUN. As a result,\nkvm_riscv_aia_imsic_rw_attr() can snapshot the physical CPU and HGEI of\nan IMSIC VS-file before a concu…","indicators":{"cves":["CVE-2026-98465"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:56.993Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/71acbea44e78665ea90e3c310fca6bbdcc0252db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8ae12ccaec6ec74945d8c1ef39f2c1b8df779abc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a29c5d2dd2ef9a8617a9a6d5585696d5f149cd98","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c525772c304c971b0d3a1f2898dedbae653efe90","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98466","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98466 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp sta…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Transfer the hyp stack pages out of the host stage-2\n\nfix_host_ownership() walks only the linear-map alias of each memblock\nregion, and the per-CPU hyp stack, mapped in the private VA range for\nits guard page, has none.…","indicators":{"cves":["CVE-2026-98466"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.090Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/22df195bff84300a3f04813d6148765c77ac565a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3a8c562892b96f35bba1e00d5e455a15963bbb92","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e5dd2a91a7ae3a276e6d79806127e923936e241b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98468","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98468 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix spurious warning…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Fix spurious warning for benign stage 2 teardown race\n\nkvmtool was used to establish an L1 guest with 8 CPUs and 8 GiB of RAM, an\nL2 guest with 4 CPUs and 4 GiB of RAM and an L3 guest with 2 CPUs and 2 GiB\nof RAM, all o…","indicators":{"cves":["CVE-2026-98468"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.293Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/330346dda3bf5f8a3b06723024f7d906326270cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/38b70fc453c3112f1a62583b89903ae41116cc27","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c23ed110d27ba99cf3a881986514f79aacedf476","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f44a92633136b409ebb9b7036fceb7e11de60a20","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98469","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98469 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR<…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Fix AArch32 DBGBXVR<n> handling\n\nThe consolidation of the breakpoint and watchpoint register accessors\nswitched DBGBXVR<n> from trap_bvr() to trap_dbg_wb_reg(). The latter\nselects backing storage with demux_wb_reg(), wh…","indicators":{"cves":["CVE-2026-98469"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.413Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/6b1bca1b1ab77f60a62087337bfe6e2f0efb9e6d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8530a05b304d312fe7dfbc5df7d3e87cc31b256a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/af6813d16ace2765011ca1c567be86ade1d1ee8e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98470","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98470 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unk…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Don't WARN on an unknown VM ioctl in protected mode\n\nkvm_pkvm_ioctl_allowed() WARNs when kvm_get_cap_for_kvm_ioctl() doesn't\nfind the ioctl number in vm_ioctl_caps[], and kvm_arch_vm_ioctl() calls\nit for every number th…","indicators":{"cves":["CVE-2026-98470"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.507Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/49d9d295d69d07e850cae35933ba8519e2915f26","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc53eb5c6515e3221314624a22c9da9c80a67f63","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98471","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98471 — In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Do cache maintenance on the source VM during intra-host migration\n\nManually perform cache maintenance on the source VM during intra-host\nmigration to ensure no stale data is left in CPU caches after the VM is\ndestroyed.…","indicators":{"cves":["CVE-2026-98471","CVE-2026-98718"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.600Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/37dfb676fafd1eef36fe0bb649607afbb0d5521b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/93de2a6a4b91b72607136dd656edf03fb399d27f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d4cc2dff12116a700add601c0262132cc26e1b2c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8b7d4f68fef96cebe0b6dbb6e5607772337f7369","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/973ea70393e885e540f714904e51bc6cac80e3d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/de83ff6a4d8f3618473bedb3c4400020c22e8a8a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98472","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98472 — In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Free have_run_cpus dur…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV\n\nUnconditionally free SEV's \"have run CPUs\" cpumask in the VM destroy path,\ni.e. even for what appear to be non-SEV VMs, as an SEV VM becomes a non-SEV…","indicators":{"cves":["CVE-2026-98472"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.697Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/12c1f6e03f944e399bd2c88441dca5dc702b95a5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6aef7cf800098749ff5d660222efaf6e01e98c09","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9784e5ca91b37b387f3f414af4340c54f7a63566","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98473","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98473 — In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and p…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/vfio-ap: fix KVM GISC and page leak when queue removed from host config\n\nThree related problems exist in the handling of KVM interrupt and page\nresources when a queue is removed from the host's AP configuration\nwhile assigned…","indicators":{"cves":["CVE-2026-98473"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.793Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/3c3433657c82f200dae36c29e2b80681c81b85be","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/65e05ec252a9b79e75930d3c4dd42d8877db04c5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cf441a0db681dfad5e89b015d6be11365159d7a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/da69d3ac53490724eba0ade9deb4e539a6ae9034","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98474","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98474 — In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device loc…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/pci: Fix missing device lock in zpci_report_status()\n\nWhen pdev is non-NULL, zpci_report_status() accesses the device's driver.\nTo get a consistent state matching the recovery, the device lock needs to\nbe held. Do so by expand…","indicators":{"cves":["CVE-2026-98474"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:57.927Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/0261aef4b15efcee2860ab857e5cb05e9bfa47b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1b957d5c2f737cda731cb1a1b71a7524d54538f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/743a8458978d13d84a1cf74bcd29b9959a75d3a0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98475","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98475 — In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physica…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cmf: Fix virtual vs physical address confusion\n\nThe measurement block address is an absolute address. Define the\nassociated schib_config and schib fields as dma64_t to enable automatic\ndetection of incorrect assignments. Also…","indicators":{"cves":["CVE-2026-98475"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.027Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/748ec2f7f5df9b4fc742546a8bfc8aa5d847353e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7f78226eb743b362f52b212d7763801642539d1c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b11f369be31ea11c746833e4d3ad51dcd6b5fa2b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f4d04425e66af2ecee9d1a49ae0484436f3c2fd1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98476","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98476 — In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer deref…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()\n\nThe channel path registry entry associated with a CHPID may be removed\nwhile the subchannel's PMCW still references that CHPID. In this case,\nchpid_to_chp() can r…","indicators":{"cves":["CVE-2026-98476"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.130Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/27e396a89f76f742abdbe9f8c4a58a6e806fdf59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/44b16b02608058fc72198ac0205969f0f43065df","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5b76268dac968612f7283d59b539036de955b7d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5e006ac90a4d331db1dd712b91fec849b45ffc01","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5fc54e04dad90b15d0430118b3f288a1d64e66c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d8b21820caed9128945fffcedf03e2a4c21eee2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3bbcb32deecc06ebb1762398399b566d5ff2fc9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dbf30e661ceb9a52c94c85719716391dcc29142a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98477","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98477 — In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmu_ctx pass…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Fix NULL pmu_ctx passed to pmu->sched_task()\n\nperf_pmu_sched_task() returns early when cpuctx->task_ctx is set, and\ncpc->task_epc is only non-NULL while a task context is scheduled in on\nthis CPU. __perf_pmu_sched_task()…","indicators":{"cves":["CVE-2026-98477"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.243Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/249a2bd87a0e57dc28f36e992807edc9cae309b5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/36bb85cf36cab15fb611cb44b78a5df06e4e69a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b5409311b606d536cc485f3706c242c2afa93edb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ec15f6a50183fc01f470af74ad49900fb3731fca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98478","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98478 — In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal c…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: Keep internal commands dispatchable during error handling\n\nCommit 08b12cda6c44 (\"scsi: ufs: core: Switch to scsi_get_internal_cmd()\")\nswitched UFS internal commands to allocate requests on\nhba->host->pseudo_sdev->r…","indicators":{"cves":["CVE-2026-98478"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.353Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/9f6f4840def931814c106fc800f57a2d26befee6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b52d695d062095327b944acf7daabbc816ab319b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98479","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98479 — In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Check the da…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi_tcp: Check the data direction of a Data-In PDU\n\nThe Data-In branch of iscsi_tcp_hdr_dissect() resolves the ITT to a task\nand copies the PDU's data segment into that command's scatterlist without\nasking whether the co…","indicators":{"cves":["CVE-2026-98479"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.467Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/24ffc919467d20951f0f132d1c75294e2e91e09b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/79991b770fc3685b1d5cf805b659a879edd19931","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8db1232945bc663fb94f300090a1fc108de99296","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/94e5bdd08e51c450d954bc592f591c233ca5c9df","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bce07e2f37b5e4a427d36fd6b1c14067b27591db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/de96dc11aee0d058927bff94a168e3c5c46483e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e3b25bf2cf2496e85bc05b33360faf9fdf880e03","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ee56b5e18f566c0b5a183379dcd63d402cebf2f8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98480","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98480 — In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on sta…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: trf7970a: power down on startup RX gain failure\n\ntrf7970a_startup() powers up the device before applying the optional RX\ngain reduction. If the register read or write fails, it returns without\nundoing that power-up. Probe's un…","indicators":{"cves":["CVE-2026-98480"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.593Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/6ef70d790425e76b42c69e416ee78c62bdc37d00","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc444e4ad43461374dd128573eccb8979d2adb4c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2acbde7e67df44efa8f0963462d1192e7694ffc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98481","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98481 — In the Linux kernel, the following vulnerability has been resolved: nfc: port100: reject frames whos…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: port100: reject frames whose declared length exceeds the received data\n\nport100_recv_response() passes the URB transfer buffer to\nport100_rx_frame_is_valid(), which checksums le16_to_cpu(frame->datalen)\nbytes of frame->data. d…","indicators":{"cves":["CVE-2026-98481"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.697Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/035056e07ea65be670284246d9bc62f2f00ff4a3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/092c6a605cbd6414ef499834c2e0da69c2c3388e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0d482995f0cdd0302450aa300c684c642d8ab31f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/144ad477c381e2c592b64898d04ab4ce03b32861","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/14b1467cfc6630583650f33538174c5a1ec685ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9e8df087826b9999d1b83b06f5d85675d5a69c9e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/db66a30588630c7de30ef033f00daddef69f6ad9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e4da1452e10c6472a4bac48dc2f6a35fff1fcd69","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98482","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98482 — In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: drop truncated I/RR/R…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()\n\nnfc_llcp_recv_hdlc() reads the sequence byte skb->data[2], via\nnfc_llcp_ns()/nfc_llcp_nr(), before any length check. The receive path\nonly guarantees the two-byte LLC…","indicators":{"cves":["CVE-2026-98482"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:58.817Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/066205553a0106565bcede934f5721c25ebd6e4e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/18f60ee882403d5b48097f5f6ae45f794e4cc643","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/273f9d667cde649f8de9d72b1303cc2f4b658c50","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3afdbebfee2ef7e9510880868cfb482cbffe6836","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/51b6d73373589abb9de4d84767b0db1bc8d395d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/744e61bd06188d8bb068c26a461c252f242b05c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/810f204ef8f61f0c930cf6b3280050b3ee6a8ae7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9b4086eb67a9a3b1ce69fef1b6793827363703ce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98484","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98484 — In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip expir…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: skip expired catchall elements on insert and delete\n\nnft_setelem_catchall_insert() looks up duplicates with\nnft_set_elem_active() only, while nft_set_catchall_lookup() and the\ndump path additionally skip expir…","indicators":{"cves":["CVE-2026-98484"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:59.077Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/12cf803edfffef96f6415f0b5dbc7ec88842ea0f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2f07da3881525f7cbfed1ced2796c71a201505b9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4fb8b1ccc475651e480e509de126bb9ce7f3cff9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/70194dc37670bd08e44b471389861cc01bd3a3c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98485","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98485 — In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: fix zero-add…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read\n\nrt_mt6_check() permits rules to be configured with rtinfo->addrnr == 0\neven when address matching (IP6T_RT_FST_MASK) is requested.\n\nIn the IP6T_RT_FST_NSTRIC…","indicators":{"cves":["CVE-2026-98485"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:59.187Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/191239b0939692e92459d8d32cad14247fa93f89","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5a54f8b7f7fe207a5c14713015a5820588faf1ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/82313c169eddc02b1bf5ba6b427803e272d3ec42","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/959d1829d1ce8b91b435b24a923b51bcc8897090","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b89249819a7d6698bed152feafd3bc6c08489d15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d9cf4ac6f326330e1fe4d95671d36a6ff3593f64","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd55c0ea87bf70e4e4b3b683acd29ef981335b26","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fe336bab13834394320997de8b16ca4a913b4f13","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98486","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98486 — In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer l…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ena: fix MMIO read buffer leak on probe failure\n\nena_device_init() initializes the MMIO read mechanism with\nena_com_mmio_reg_read_request_init(), which allocates a coherent DMA\nbuffer for MMIO read responses.\n\nThe normal remov…","indicators":{"cves":["CVE-2026-98486"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:59.313Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/30ff01b4c7e419bb70f40f01dcd7f6af680808b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/47785f9f638b064ce6e32e8e3b6f1ffd83849fc2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7bd3e9a2d0c288e54f51df260d9433163f5fbc1e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9476b4468862927297c94c440863cd8ed1e7cc83","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98487","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98487 — In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port g…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mdb: restart port group walk after deletion\n\nbr_mdb_flush_pgs() keeps a pointer-to-pointer cursor while walking\nmp->ports. br_multicast_del_pg() can re-enter the same MDB entry through\nbr_multicast_sg_del_exclude_ports…","indicators":{"cves":["CVE-2026-98487"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:59.423Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/46ec55855c972504258c371677ac039ba20e5d12","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ab1404ac81154a89fb61ac50ae9a04cd8d4834dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ab3c4a4c85f2e1e8d04b5c1770dea8412d21c7fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fe2a42789c12eb7c5d3a42191e2cc735a6c35ead","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98488","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98488 — In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1e: fix soft lockup on out-of-range hw_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range hw_n…","indicators":{"cves":["CVE-2026-98488"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:59.613Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98489","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98489 — In the Linux kernel, the following vulnerability has been resolved: net: atl1c: fix soft lockup on o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1c: fix soft lockup on out-of-range tpd_cons read\n\nThe hardware can report an out-of-range tpd_cons (seen as 0xffff)\nwhile the PCIe link/MAC is resetting. An out-of-range value can\nnever be reached and the loop below would…","indicators":{"cves":["CVE-2026-98489"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:59.733Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/36c2009d90f2210ef92e6f4f2850e8b57b09e754","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4daf80da0c38b8cd92c111ad96cb38322aabf586","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/57b55367b6e3accc55a989afeaf127063e3614dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/586847400b1168a88917287ac02c2c91a620b841","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5ea2576a4f5ec476f33169fdbe9090d2b038ad13","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9f2cc71a2e2799d9c993c73f1bd36507eef6ae43","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d4ab263e40fcf7cfa38a43ec774067d32eb94e16","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e7acd4cdeccbcdfd407adeb72b1eba14d1145b6f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98490","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98490 — In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: conntrack: fix helper UAF due to extensions realloc\n\nWhile calling the helpers, a raw pointer to the extensions area is\nwired into expectations list:\n\n  -> nf_ct_helper()\n   -> helper->help()\n    -> nf_ct_expect_r…","indicators":{"cves":["CVE-2026-98490"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:16:59.903Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1a4151e6be57b098b7a5ebfbde58585e83200cdc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5f23080a625dd7855ab91485c8d691a54a1979f0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/afcf362625190c5260530b1d6c7daa98831f6b83","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e02a83bb0b7a203f6a22f55ad5f426765560f811","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98491","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98491 — In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry\n\nIn a case where skb with an unconfirmed ct entry gets cloned, we may\nend up committing both but with different sets of extensions.\n\nThe series of events:\n\n 1…","indicators":{"cves":["CVE-2026-98491"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.020Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/26b2bd70d22457556e2fa01cbf1192cb1a94d619","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/37e3c878b183a115f9a114067f9ef3b408ad27fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/457e0df1b5711fbeb7ba1b6bfd826f5ef30e7e55","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/55e5256adf3940e71802e2f749cacf81518726b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/707c2dc77891a874f4e8c52c285a511079164ec8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/de41ee24f77b0fc45397db3e277cae2adbd43dfe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e0fa5ea434b7e8467ef3adc64e3858b1ca2a642d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e2829ae5459ddb5fce526b2e84697edf6c0c3cef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98492","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98492 — In the Linux kernel, the following vulnerability has been resolved: net: macb: fix dma_alloc_coheren…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths\n\nFix 3 leaks in macb_alloc() error paths:\n- Tx buffer allocated but crossing a 4G boundary: Tx leaked.\n- Rx buffer allocation fails: Tx leaked.\n- Rx buffer alloca…","indicators":{"cves":["CVE-2026-98492"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.150Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/23d42b9a3bcd55b17d3b371544fedc708c2397e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/259e6cbb6a097da8ced544ee92a6fbde35aa1338","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bda487567d0b7b15dfa876511085c0666b9efad5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98493","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98493 — In the Linux kernel, the following vulnerability has been resolved: net: ipconfig: bound DHCP option…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipconfig: bound DHCP option construction\n\nic_dhcp_init_options() appends the hostname (option 12), vendor-class\n(option 60) and client-ID (option 61) options into the fixed 312-byte\nbootp_pkt.exten[] buffer.  Only the client-I…","indicators":{"cves":["CVE-2026-98493"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.257Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/24e79508b237dd2a69bc6fb6ac5cf7f126178307","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/abcba6f080c63e403037ecdffde43170d242376a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cbaad2922bd5d4d303055ae9afecc8999e6b40c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e47a1958e12abc3a17b5231a4f21c8f1bf662e08","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98494","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98494 — In the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on ou…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range…","indicators":{"cves":["CVE-2026-98494"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.370Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/0f573b0576252d44fb27ab8470ea873bc6408ef3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/43e746821f5f5afbbf68e388bf9fbe221e03bfca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5d7ac337d37cb97d77e4c910d37746694b606661","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6285919d4c06254d257d24dc980f6332e1984a82","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6ab9f61ca851f02ae4398cebaf00735a22e1d6ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/79e2447b11322c27ef9ac423be0a94efc7691f02","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c55e51d5899e80f9593b26985ed0b89e0c828a5e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98495","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98495 — In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: arp: terminate device name before lookup\n\nThe ARP ioctl copies a user-provided struct arpreq into a stack object. Its\narp_dev field may contain IFNAMSIZ bytes without a NUL terminator.\n\nSuch input is passed to dev_get_by_name_…","indicators":{"cves":["CVE-2026-98495"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.483Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1b08c5c3ac27c9ff91c5309f4a32b4e91ce2263b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/35e716a70733472ede300540082d64c33bf3b4c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/414bbad9928598904313299ac9e037a73f520be1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/47107491b48ceef0a2faa7a010cfa961f211ef9f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7389757d88f54237951d7497d9c4dae7cc6d64be","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ae6d704dbf9542b0a0830ec91a2db4f30307e7d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ba664d83638640cf454b65167339cbf20dfd6f10","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d8b6529e80bcb4fb8177121404cbb3377acaebd2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98496","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98496 — In the Linux kernel, the following vulnerability has been resolved: net: airoha: npu: cancel wdt_wor…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: airoha: npu: cancel wdt_work after releasing the WDT IRQ\n\nairoha_npu_remove() calls cancel_work_sync() on each core's wdt_work,\nbut the watchdog IRQ that queues it is requested with devm_request_irq()\nand is freed only after .…","indicators":{"cves":["CVE-2026-98496"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.590Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/4bdee8060d1e4581624e68fbd369b1afb14df4bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aca91d8fa0ecbc990ebf9a688c684dda78a43c00","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/da9d42531f3a6dfea2e9c775b62a46185dbf280a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98497","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98497 — In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPse…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: fix swapped IPv6 IPsec policy masks\n\nIPv6 XFRM policies may use different source and destination prefix\nlengths. mlx5e_ipsec_policy_mask() builds the corresponding masks\nindependently, but setup_fte_addr6() installs each…","indicators":{"cves":["CVE-2026-98497"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.697Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/10de7ed8ef4840da9ca21de4c29578657ac367db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3803dc8477f08e0dac4050cafee0de43f32727be","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e73f832f0a7b2c6ea45b2124c732d639be97b547","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98498","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98498 — In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix rev_entry referenc…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()\n\nWhen the reverse entry is found but its counter is already being\nreleased, refcount_inc_not_zero() fails and the reference taken by\nmlx5_tc_ct_entry_get() i…","indicators":{"cves":["CVE-2026-98498"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.797Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/0bf6bb567f0edaa771e7dd208ef98da50e6a4485","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1f13989a0704bd98cab09f9bee63e2c8a98ad4dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/288721013605b4e0304e10f6a087b77f71cfad11","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/598daa5f95883f881a54967da40ce0fdfc1fdaa8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/60eab87d0a798070bf5a856b1d9e5785ce92da53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/79a3257280a335bbebbcd10d3895e8468bdcd6ae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/99d8dc51663747078c031acac32edc6d90c8f1f7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c45c997d0c27359b502587897f775c5a277f0bd4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98499","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98499 — In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in waco…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()\n\nThe 'wacom_wac_pen_serial_enforce()' function may calculate and pass an\ninvalid offset to hid_field_extract(), resulting in memory reads at\nincorrect addresses -- possibly…","indicators":{"cves":["CVE-2026-98499"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:00.913Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/26471d954bbfbfb9032994f7f485802ee20e0582","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/456afe4707e23cc114ad833197f63b52bb8fd1e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4b09b7c84b8633cd041181616bd15bf5e73c164d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/65e7c4b5366b770c60dfefac3f1d06e33a9e411e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9aa237cf66495b2426ddde8532e9b08a0ed83aaa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9aa62f967b6a4bb30aa3b778e02c8a5ca6bcde51","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3129e6f26e18c0886ede7265f187a7ec289e1d1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eaa7d29341ef4b91e84ad097562982288a7c376c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98500","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98500 — In the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use cancel_delayed…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hid-oxp: use cancel_delayed_work_sync() in remove\n\noxp_hid_remove() uses cancel_delayed_work() for all three delayed work\nitems.  cancel_delayed_work() only dequeues a pending work item without\nwaiting for a currently executin…","indicators":{"cves":["CVE-2026-98500"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.040Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/abd24922c2a9797d6184be0561dd85e7bcdfd091","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eed737d89fa368251018a62e1d698958ef7dc635","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98501","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98501 — In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: alps: fix use-after-free on input2 registration failure\n\nalps_input_configured() stores data->input2 before calling\ninput_register_device().  If registration fails, input_free_device()\nfrees the input device but data->input2 s…","indicators":{"cves":["CVE-2026-98501"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.143Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/2e55d76e6e8a756f6d87c241de975599f82b02fa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/443f6b93442b10b972a16f57ceaaea75b77892b6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/47e5e177e9e4e10da6f2759d5ce8d049e33efdc4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5a8ad63158165bacd6a1d7420e0fe5364c913b06","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/64f824dccfd316fd3db8ea1cc4e8a76ad6a02740","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/925da1d2a24787f24872de13a4680437c54de179","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d3aba3442798ce4a4c8ce3104d7b286d61e605f9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ef8ca5bb4c8b9696f38b1bebce1c851baa02b77b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98502","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98502 — In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: alps: unregister DualPoint Stick input device on remove\n\nalps_input_configured() allocates a second input device (\"DualPoint\nStick\") with input_allocate_device() and registers it, but the\nalps_driver struct has no .remove hand…","indicators":{"cves":["CVE-2026-98502"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.260Z","fetchedAt":"2026-10-20T03:01:48.457Z","references":[{"url":"https://git.kernel.org/stable/c/1170ebfba562b3938ff7749b2e42e4420f19436d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/978e801750c7b0859e87eae619f7d88fcd88333e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aa4845a710ae9fee6a3831f5c338904cea77c3aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aa9dde93e05a837645fdfd577eea71f0733f0694","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98503","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98503 — In the Linux kernel, the following vulnerability has been resolved: packet: use ubuf_info completion…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\npacket: use ubuf_info completion for TX_RING packets\n\ntpacket_snd sends skbs with frags pointing into its ring slots. Slots\nare released when skb->destructor is called.\n\nA call to skb_orphan calls skb->destructor before the skb is…","indicators":{"cves":["CVE-2026-98503"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.370Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/2a0c9afefc0ecea2cc30ccfbbbc98182a0986191","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9518405613863d0bf0700927a21367f5942cf058","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e67c455d79fbf709a94965f09a2be6bf4f4ba5fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eda9bcb721f15a93746a99eabda33d80b86404fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98504","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98504 — In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Omit bus prope…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: of_property: Omit bus properties without a subordinate bus\n\nA bridge (a device with a Type 1 header) may not have a secondary bus\nallocated (pdev->subordinate), e.g., if there are no available bus numbers\nor the bridge seconda…","indicators":{"cves":["CVE-2026-98504"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.493Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/879c911f77b8a7862aa16079b04efc3fdc5d32ec","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8805840aad73df7146778be243a196d48b4f6430","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a6d97d10e49ae49026ae13af6c41634fce470a37","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aee774588abd78f75952fd34c3fa461bc46b62c2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ccd32fa3489cbe86a0b281da4447b4c7eadb3518","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98505","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98505 — In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: avoid hw-driven…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()\n\ndamon_hugetlb_mkold() reads the page table entry into a local variable,\nunsets the accessed bit in the variable, and updates the page table entry\nwith the up…","indicators":{"cves":["CVE-2026-98505"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.610Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/00457981327c80bcc56e07d4714fe189337a19fa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/39c0ceedd54557bdc1542de08d22b2ed33e534e4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6e74ffc9ecf6ec24eee117150da78a1102be74c5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e59cb7eda7c06334a0faf5aa44adb6acf2a1287a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98506","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98506 — In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not dissolve giga…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: do not dissolve gigantic pages without runtime support\n\ndissolve_free_hugetlb_folio() doesn't check\nhstate_is_gigantic_no_runtime(h) though remove_hugetlb_folio()/\nupdate_and_free_hugetlb_folio() silently bail for such…","indicators":{"cves":["CVE-2026-98506"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.717Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/443628f755b35bf45044f68b970b65cd531c42fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a363c62a653cc8b3e21da9545fa4e028ef50f9c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ccf96a4b8626a001c13c5836d8357f31c57bbd8e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ddc1055b557506a6ea8930dfbd8d1555d6a3f01e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98507","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98507 — In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier bet…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish\n\nOn arm64 server, we find that a task trying to grab the anon_vma lock\ntriggers hungtask.\n\nINFO: task main:2354726 blocked for more than 120 seconds.…","indicators":{"cves":["CVE-2026-98507"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:01.817Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/4cef512a955e4008ae4436a4fc97726976df1fdf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a500df43cde075f6ea4b8bae495d89f2c35b3e16","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b6ac0b3f6013c168f22cad97e79967accacb08e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d348a715380bfcc6a611bdf722169d53fd01e735","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98509","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98509 — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix memory leak of f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix memory leak of fence event on execbuffer failure\n\nvirtio_gpu_execbuffer_ioctl() reserves a DRM event with\ndrm_event_reserve_init() when VIRTGPU_EXECBUF_RING_IDX selects a ring that\nuserspace has enabled polling for.…","indicators":{"cves":["CVE-2026-98509"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.083Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/43bfe2b60c149bf6effda25f245a00509061fa15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4e333e2336138f4659b1d7a0371c499f80428612","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8fa78900fd24247277c03dc7b8a2864cb12d4340","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ae583668f16d41fcc1b54f45848c1b6ac1d6669a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b74aad23d99b279bb34d135795f39a6d8ecdc075","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98512","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98512 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: RCU-free the schedu…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: RCU-free the scheduler-containing nouveau_sched\n\nstruct nouveau_sched embeds a struct drm_gpu_scheduler (base).\nnouveau_sched_destroy() calls nouveau_sched_fini() (which does\ndrm_sched_fini(&sched->base)) and then free…","indicators":{"cves":["CVE-2026-98512"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.457Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/35151e9a8274174ccbb92e3b3ba7dc7a008dcada","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/40edf5eefc3fd94592a91d6eb074d4fc6f606c75","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cd6e11b6ebe04a0a1f1435df561acada9eadc563","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f7eae6d8d768fabd6b59779ca7da79e02c74e113","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98513","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98513 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix runtime PM leak…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix runtime PM leak in nouveau_connector_detect()\n\nIf nvif_outp_edid_get() fails, nouveau_connector_detect() returns\nearly without dropping the runtime PM reference taken at the start\nof the function, keeping the devic…","indicators":{"cves":["CVE-2026-98513"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.557Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1e04611d3735543bd80a67d9d13dc13f503746fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/59aa1f8c95941e623891d46c805e8fb1257b5a3d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/780ad8e4df9f767806587d33b42372acf8fbe5e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/87c2f8ce1100ccbbc40bfab067741edbd1f0ef02","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98514","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98514 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix gem reference l…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix gem reference leak in validate_init()\n\nOn the ttm_bo_reserve() failure and \"vma not found\" error paths, the\nloop breaks without adding the looked-up object to any validate list,\nso the reference taken by drm_gem_ob…","indicators":{"cves":["CVE-2026-98514"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.657Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/030e93fc91d55d9487b3b85fc0712bb795d77834","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3c80e069470cf73c357c9edb5ec5fba20e6f6a98","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5ea72f7b7139b123713a7983448f910bc4514d9e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/74485cdc343060fce08f8f3990da524d783e43a7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8281930fc194ad448aaa5de8dd47fb6fb1cba327","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/957619120c26d6727efd18504e6b488673d3900a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9e13c398a23445baf38f0a59033dd9872a2bfe20","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/af2f48c12365866abb327d75c21a13bbde84719c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98516","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98516 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix bridge referenc…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix bridge reference leak in nv1a_ram_new()\n\npci_get_domain_bus_and_slot() takes a reference to the PCI device,\nwhich is never released once the memory size has been read from its\nconfig space.  Drop the reference befo…","indicators":{"cves":["CVE-2026-98516"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:02.920Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/2bda86f1fb2373a2ad8900341d5d6a6d68ce6ddb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3e0861ebb9ecf0b726ea42123bd579362ec1f977","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/553c86816e99855d6784eebd2588d5d2198c280e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/67b4411538c8341692548429d43256f25be99f7a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6d497216c10af3dc9747b399295f385fabbac9e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9ffb43369ae51af5d5646b1ef680ab1af0fb4ad9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ac4f1d28498b9798fc20f91f23a4256032186370","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/add5e0a45e3971df9c65cc7b59c90559a25dc5a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98517","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98517 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix UAF in nou…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM\n\nnouveau_uvmm_sm() calls op_map(), which passes bo->resource through\nnouveau_mem() to nouveau_uvma_map(). nouveau_uvmm_vmm_map() then reads\nmem->mem.type.\n\nBu…","indicators":{"cves":["CVE-2026-98517"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.033Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/0d29bf51f8dddcf8556bf76710d3dd3024a1a717","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1245b4b43da67596be61600dbd746539c79495ac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3359a372efb6d585c97019ee1b7f1874442bcebe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5b2fffbba290ed74f381911b9986570bc10feaa4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98518","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98518 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: pin VRAM for t…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/dmem: pin VRAM for the whole registered range\n\nCommit c32287471077 (\"gpu/drm/nouveau: enable THP support for GPU memory\nmigration\") grew the device-private region that\nnouveau_dmem_chunk_alloc() registers from DMEM_CHUN…","indicators":{"cves":["CVE-2026-98518"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.163Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/06c69c64686a31783c8bec6495dc22822d38c4ce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/64ca4cdd1031206424e6455f0ae4fb0560d8f46a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98520","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98520 — In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix use-after-free a…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping\n\nkfd_dev_mapping caches the address_space of the first /dev/kfd opener\nso that the GPU reset path can call unmap_mapping_range() to zap all\nuserspace mapping…","indicators":{"cves":["CVE-2026-98520"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.370Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/02b74891624e09a5512c6d84f267d01fcc306a3b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3a31087b1c8df679b653c1a09d9abe5ff7ec8ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98521","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98521 — In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix incorrect RCU tear…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: fix incorrect RCU teardown order\n\ni915_gem_busy_ioctl uses dma_resv_for_each_fence_unlocked() to iterate\nover the fences in an GEM object without holding a reference but only\nthe RCU read side lock.\n\nWhat can happen here…","indicators":{"cves":["CVE-2026-98521"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.473Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/2dd0190e397ec6468095fd3e80e79276a7361449","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4d4ca84213327da1f84ef7af3946dea6b14c5d88","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b12e041aedcf9fa77c6002a49f07eb20d0521b86","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c53db9cc245219af6b528ca022a17ebfa91d80ba","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc890d3f1b15bf6481dc7270fba0b4fbba572813","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2da6696e0c4e60414706e607029d0bb0330c67e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98522","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98522 — In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Propagate map f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()\n\nMap failure from pvr_mmu_map_sgl() interface was not returned correctly\nto pvr_mmu_map() interface. This resulted in pvr_mmu_map() interface to\ncontinue inst…","indicators":{"cves":["CVE-2026-98522"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.583Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/13c7ae1d92ceea18d55612fa9431ca5ac77025f5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7b824c293a6b56de8285a97984c507cba56bc4c4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/afe5b4d66d45b278ecd0e3d6889fb208ce2e5339","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d30ea2747164992f5e720f6f53695d422bdc0346","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98523","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98523 — In the Linux kernel, the following vulnerability has been resolved: drm/client: fix restore of parti…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/client: fix restore of partially initialized client\n\nI got a null-ptr-deref report when closing a DRM file descriptor:\n\nWARNING: drivers/gpu/drm/drm_atomic.c:2031 at\n__drm_atomic_helper_set_config+0x18e/0x1b0 [drm]\n\nCall Trace:…","indicators":{"cves":["CVE-2026-98523"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.700Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/11edd5b6735d2e1069ddce672b1836713647f7fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1fca688e9443003e33cf30453e7a7560367656c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a69c4b678db808c0d89abb8cedeaaac38d1ef182","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fcbedba553a9c430079ee225df2dc7ab556a2f83","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98524","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98524 — In the Linux kernel, the following vulnerability has been resolved: rds: ib: Clear the sg list when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrds: ib: Clear the sg list when mapping an MR fails\n\nrds_ib_map_frmr() stores the caller's scatterlist in the MR before DMA\nmapping and registration can fail. On failure, __rds_rdma_map() unpins\nthe pages and frees the scatterlist,…","indicators":{"cves":["CVE-2026-98524"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.827Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1be3211e6ac77adbb1eac01314d989d243b32c59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4468df5bcdef959fd96494e9968f323561a45f4c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/49ba5ed0129906e0362c2e4b5e21c89b2a41e115","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/58eb1b3325edac42dc6df72c80962bd53a3c8ca7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8dca3c81344532a7f05edb3d12f31f3009410a90","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b36d32f30c3f1e58e3a5ae79d0f52836a316b36e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c42d316163f89cd23de2f3e24558177a8c29bad8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e2ee0616260080376123997488b5cf8a3870b8d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98525","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98525 — In the Linux kernel, the following vulnerability has been resolved: mctp: route: iterate socket tag…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()\n\nWhen a socket transmits a packet with MCTP_TAG_PREALLOC set,\nmctp_lookup_prealloc_tag() iterates over the per-netns &mns->keys list\nand matches netid, req_tag, pee…","indicators":{"cves":["CVE-2026-98525"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:03.953Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/09299addab11857e92eca55cd8ef3350b927c90c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/26cc0e69cce062cd3aa6fae33074684669c35a71","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e35cb500dd14882f8dee61783fccd1823fd3ab0d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f178300e2f56ca9ec2a3a0090608730bbee0af7b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98526","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98526 — In the Linux kernel, the following vulnerability has been resolved: llc: reserve device headroom for…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nllc: reserve device headroom for allocated frames\n\nllc_alloc_frame() reserves link-layer headroom using the device type.\nThis is insufficient for stacked Ethernet devices such as VLAN devices,\nwhere vlan_dev_hard_header() pushes a…","indicators":{"cves":["CVE-2026-98526"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.063Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/018020f5a48cc86fdd6dc2d380f6c70443ae7639","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/16ceac2daa89dd16917bc488ab05b9dd6961a603","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1937222c2511ac91377d39f28106c34734f5f8c6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3361c93e417384ebf28003e0fb6d5304653d3b05","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3a3f57c4061d9e9cc3bc04205d36ce41ae3406c1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/72b5b9a28b996e09b8b5b944370c79851bb68f52","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7c38524b2b2456bd33cb360420da6cbf9cad1b33","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e06f8b6e27cc616d3c587e9784c4a033eb310a16","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98527","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98527 — In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: zynq: fix runtime PM leak on request error path\n\npm_runtime_get_sync() leaves the usage counter incremented even when it\nfails, and zynq_gpio_request() returns the error without dropping it.\n\ngpiolib does not call ->free() wh…","indicators":{"cves":["CVE-2026-98527"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.183Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/25c08be2a5e7715f19a6e02bbe9b0e5f01c77aac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/58a417a19d80141fff3abe6004e2e47285506e73","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/60a76cdd92e25f576dc58d756a565760dde1f7a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6e05f1c614a57a5d4c364dd12e20c6fd012f9d3e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6e20dabffbcd7b222d8e7bb85a7d8e8325df7699","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a3e9b7f7c9558f8c9592f8f817557bff98707bb3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e380fba02908b809f5bbef371259003cf5887bb4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e9438ab5328a177c9c0e5df87eb92a7162841e98","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98528","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98528 — In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: fix kernel stack lea…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: cdev: fix kernel stack leak to user-space in error path\n\nIf we fail to acquire the GPIO chip guard in gpio_desc_to_lineinfo(), we\nreturn immediately before zeroing the info struct we'll end up passing\nto the user-space later…","indicators":{"cves":["CVE-2026-98528"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.303Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1feb5d39b05afd902ed9fc902ec5b15be03a4bdb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/60a466f231905cd96ae6f0f3c44a710c97873dac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8460ee5216ab9a38263b01dca4b0a27e083f70f3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cf3d043582e106a0e57002bec8a6de8929ba3e1c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98529","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98529 — In the Linux kernel, the following vulnerability has been resolved: gpio: arizona: Fix runtime PM le…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()\n\nSwitching a persistent GPIO line from input to output acquires a\nruntime PM reference on the parent device, but if the subsequent\nregmap_update_bits() fails the re…","indicators":{"cves":["CVE-2026-98529"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.410Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/39748357db26b20a02ea2a25ce48943e6c6d6286","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/40c010c1866382cb63ba7497d6ec74fcc60ab9cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5c8e87f33b68557a725e72f34051299f55c6fa9e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/61ed58b745c1186006b8357da651abbb7a6bff17","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d8d6cddcb7c0b8125f3a9e52492e929674009d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9ee200f484983b0a178c593e57d2fe3e67061ee8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a9f738487c11fb512dadef097b56020239c21810","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e9d810279f84b30738f7790c0ed15f8dd5b9024a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98530","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98530 — In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix permanent hang when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nkprobes: Fix permanent hang when flushing the kprobe optimizer\n\nWriting 0 to /proc/sys/debug/kprobes-optimization while a kprobe is\njump-optimized never returns. The writer sleeps in D state forever with\nkprobe_sysctl_mutex held, s…","indicators":{"cves":["CVE-2026-98530"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.530Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/5bfa9f1a9dcb6ecb607adbc1c0226605c972935b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f05a01fc7d4f731b4c100d2aef1e85ad77728862","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98531","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98531 — In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: enforce exact attribut…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: sr: enforce exact attribute length for SEG6_ATTR_DST\n\nIn seg6_genl_policy, SEG6_ATTR_DST is defined with .type = NLA_BINARY and\n.len = sizeof(struct in6_addr). For NLA_BINARY, .len only enforces the\nmaximum payload length and…","indicators":{"cves":["CVE-2026-98531"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.653Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/050a0aa3c80907b8c60a396b7e04d48d8b1a9e70","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/195813bb7324c338eaba0aaa02b18681ee65b670","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/209eefebee54c4a5f01d68b61e8ac9881eca2de9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2d959c75c27f90e9ec489d18ce5ee6b852ad4741","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/66bf65fa109326e4c4ddeb0b94093379f72838fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6fcfc362344edea745a69f3a705de50b731f3418","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/94214cf0a08dd2c5f37aeeea46078d9dfe8e4a0e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e3ac68c1cdc2535d127b2bfd50c263d16c8e4199","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98532","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98532 — In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6_find_hdr()…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: do not let ipv6_find_hdr() return an offset past the packet end\n\nipv6_find_hdr() walks the extension header chain, skipping each header by\nthe length that header itself declares.  ipv6_optlen() returns up to 2048,\nand the ski…","indicators":{"cves":["CVE-2026-98532"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.790Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1c70275ca87e769e1a52abc644d61372d8c016cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1d42828565889632068fbc2983c34d57c66af4e0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4254d5878c320c19961dd0b8e1d0aca4800d8b7d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/531255de8971c06d5d5986f85fdc2525d707ba71","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/543354c6efb27eae3372a3a9674aeaa2a86e2b2c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ca96b38730e31357ef4a9d76af1336958ac670d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dc92cb972e86790b8078337ec41015b748b8f8e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ee319bd3a0e976af5087cbe59ebc50a66f31d202","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98533","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98533 — In the Linux kernel, the following vulnerability has been resolved: ipe: protect the dm-verity root…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipe: protect the dm-verity root hash with RCU\n\nipe_bdev_setintegrity() frees the old root hash when dm-verity publishes\na new one on ->preresume, while policy evaluation can still be\ndereferencing it.\n\nProtect the root hash with RC…","indicators":{"cves":["CVE-2026-98533"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:04.933Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/2776e9c28513a1c855a94792b292cbcc533418c8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3bd335ed62444bec61201df7d368a0779e5bd300","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/599d0498a39319285afa908762e0c9fad29f772e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d7c5bd3159235edb0f2febe2cd3d3b0fb53986f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98534","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98534 — In the Linux kernel, the following vulnerability has been resolved: ipe: fix use-after-free when aud…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipe: fix use-after-free when auditing a newly loaded policy\n\nnew_policy() audits the policy after ipe_new_policyfs_node() publishes it\nand drops the new directory's inode lock. A concurrent delete can free\nthe policy while ipe_audi…","indicators":{"cves":["CVE-2026-98534"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.107Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/48f7d0233c3cc8d986d1177d0e5dd4af435e7265","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9814077275eca36ebf8d510d2f076d235ff9f51a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b72d6c72b4bfbc021e8e127fa13e0f27d09be737","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e9015d32752fa228ef2f0e07fd93fc53a4a4c723","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98535","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98535 — In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfsl/fman: Fix clk reference leak in read_dts_node()\n\nof_clk_get() returns a clock with its reference count incremented, but\nread_dts_node() only uses it to read the rate and never calls clk_put().\nThe clock is not stored anywhere,…","indicators":{"cves":["CVE-2026-98535"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.223Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/5c90f99ba74b55ddd8e919224921033cc4077f01","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/874fd58b321a9238e47c2a46345444287f2a5781","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9fd6d0861ae2fd44c771d6bc93b29bbc1202fe8e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a644f09b2090ad22a13fbcf9d141084f573108ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c2a5e591858629b6c0e284010d2ccdbc22fd0a43","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c2edf376d7804279878b207d93ffe6009c8d3d29","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cb52f9f188c3174761ad3b37db9de751e002b52c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e560bdf62b11dcaa2a018345f76869d89ed43a9e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98536","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98536 — In the Linux kernel, the following vulnerability has been resolved: writeback: report a Tasks-RCU qu…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwriteback: report a Tasks-RCU quiescent state per cgwb drain pass\n\ncleanup_offline_cgwbs_workfn() drains a dying cgwb by calling\ncleanup_offline_cgwb() until it returns false, with a cond_resched()\nbetween passes.  On a CONFIG_PREE…","indicators":{"cves":["CVE-2026-98536"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.357Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/260f586a80e7f624dd7f069898a75a904f34d373","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/407a5d205179a4ab186571b0e16ec42725dc77bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/42462b5bb0dec57db7f85d0f77655c737d45754d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4eb889649eaf65f4a5727b04ba1c017b7d05bb16","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/863049b4018237d1590cd13b16e9fe9c0faad2c6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ebf1555ad2821be06f87a88ffd9a2cab8d2200e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd3bf32279df98751364b3609eb100a3e42f253b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98537","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98537 — In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current_pwq…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Fix NULL current_pwq deref in flush dependency check\n\ncheck_flush_dependency() uses current_wq_worker() to determine whether\nthe caller is a workqueue worker and then dereferences worker->current_pwq\nto test whether the…","indicators":{"cves":["CVE-2026-98537"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.480Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/0c6b9b1e295aeff1132ac7aa738148cc65f06485","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1dccf5dc2f8fe688270b261ca4216e03c6a1e674","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/513121e69388604619ea8c0ee07e86a3d1b5b5dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8ffececcb88262389b4f91fed0fe4884b68204bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9bb739a5c5a570c28a62afb98e9326e2a49743c1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc190a6a1d20b87e6a9435202fc2a3bd84c79fb3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/db6365ced4d5855e321f772b240c0e473bcfcdd5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f97e6d0572d1b39998e053732332bc3cfdd0b9aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98538","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98538 — In the Linux kernel, the following vulnerability has been resolved: writeback: bound cleanup_offline…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwriteback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes\n\ncleanup_offline_cgwb() prepares at most WB_MAX_INODES_PER_ISW inodes\nper call and is called again until the dying wb is drained, but every\ncall walks wb->b…","indicators":{"cves":["CVE-2026-98538"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.613Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/2d1da58c79b66646721a644c6eb4dd1f9c5c9327","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/624dd0931162523d70f9db8c120b5ec6429a9b97","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9dac137bf77e0683778fb34c86e730c6129e8cb6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c96b4d1628868e1195da1a896f79e06f350a3187","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd4b92067238771b604b59fdda8efed6d70ee823","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f6988c90671e83db79df1b7b9d6fdb0e5947fd84","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98539","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98539 — In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use d_instantiate_new(…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's \"WARNING in do_new_mount\" saga\n\nntfs_create_inode() creates a new inode via ntfs_new_inode(). It hashes\nit with insert_inode_locked() and so it's marked a…","indicators":{"cves":["CVE-2026-98539"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.733Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1abd643f3783ea8f8e273c18697ff0413aa92dc7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1ae2a242c15b03470b1b16289298e597bbe3bb29","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/37ec7353f4ac495b28284b0fcb0e53d21d1b3f3f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6fda7121cb6a8ea6fbd77d0f787f04b8e8b5358e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98540","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98540 — In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraph_dat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfprobe: Terminate the fgraph_data list when the reservation is not filled\n\nfprobe_fgraph_entry() reserves shadow stack space for every fprobe with\nan exit handler, but only fills it for those whose entry handler returns\n0. fgraph_r…","indicators":{"cves":["CVE-2026-98540"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.863Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1d653a183973f5283a3db5a38cd5e195eb152244","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b7459fddcb27a4b7d01067678172afa362cf660d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98541","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98541 — In the Linux kernel, the following vulnerability has been resolved: fou: reject omitted FOU_ATTR_IPP…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT\n\nCommit 7a9bc9e3f423 (\"fou: Don't allow 0 for FOU_ATTR_IPPROTO.\") added\nNLA_POLICY_MIN(NLA_U8, 1) to fou_nl_policy[FOU_ATTR_IPPROTO], which\nrejects an explicitly supplied FOU…","indicators":{"cves":["CVE-2026-98541"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:05.967Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/3bcc1624cc1cdcc05b566475d6e848093ab2a8f6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/46b1ffb7e169c7e401dd890b29e55dbc261f8f01","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/520cf06b8ea0ba5bcc1b8b982ef07f02b5e56221","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7f4ba56f5d310dd018972916167985010a5d66a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8b43f40798bb2758489fbbcae7e841ad4443c213","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b1229b210ef5a39c58be665e6798203751411842","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d22609f3d13fc5baacd92c222731b03c593401db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd20220f86947d66d4dba2d76f13a28dbd86ef30","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98542","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98542 — In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Return PERR_NOCPU…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict\n\nWhen a remote partition is created underneath an existing local partition\nvia a non-partition (PRS_MEMBER) intermediate cgroup, update_p…","indicators":{"cves":["CVE-2026-98542"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.090Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/0751ab665cb3dcdac224b002565f2e28461740d5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/241e67b60308cdce25bba66616a109759edd1d40","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/31c88350b7dd1522792f726f79607f31bb55c50f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98543","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98543 — In the Linux kernel, the following vulnerability has been resolved: bpf: fs/xattr: don't assume the…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir\n\nbpf_lsm_has_d_inode_locked() makes the verifier rewrite\nbpf_[set|remove]_dentry_xattr() to the _locked variants, which assume\nthat the caller already holds…","indicators":{"cves":["CVE-2026-98543"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.200Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/35d442ed1f86465e49df3119fb898f985186db13","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/640d37fbd34d03af727dbc567f48c0203d1de6b4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7504b677c4370c9e4b153c553ff8831c093b1ff6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98544","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98544 — In the Linux kernel, the following vulnerability has been resolved: bna: prevent IOC timer rearm dur…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbna: prevent IOC timer rearm during teardown\n\nbna: prevent IOC timer rearm during teardown\n\nbnad_pci_remove() and the probe disable_ioceth path call\ntimer_delete_sync() for ioc_timer, sem_timer and hb_timer, but not for\niocpf_timer…","indicators":{"cves":["CVE-2026-98544"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.300Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/28e32ace754b57534ef0ca0fb99bcbea5b13ba2a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4d97a141e85a034566c33c7ed854c8a3e8a268f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/77b1718e39e5c9f6956fb60807326af20baf889d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e09d1c6729ee4a7812128902d9274ff565f958b8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98545","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98545 — In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: bound the ATA…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nata: libata-scsi: bound the ATA passthru sense descriptor writes\n\nWhen an ATA PASS-THROUGH command to an ATAPI device fails, the sense\nbuffer holds the device's REQUEST SENSE reply, and\nata_scsi_set_passthru_sense_fields() trusts i…","indicators":{"cves":["CVE-2026-98545"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.403Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1603abb0c50420e97cf4a1feddbd5e183c5fdf86","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/80320b278fea07ffcda3f57b67b61658e0a4e1ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/80fbb0bc4d11683c88f2f9d3997ea02fcada5408","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c698f6deabf680f8f4a1727ef2dc80fe78815fbf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d9a7147b93624660626cd7c3b1143715699e1f5c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98546","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98546 — In the Linux kernel, the following vulnerability has been resolved: arm64/boot: Disable trapping of…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64/boot: Disable trapping of PMZR_EL0 writes to EL2\n\n__init_el2_fgt2() writes one mask to both HDFGRTR2_EL2 and HDFGWTR2_EL2.\nPMZR_EL0 is write-only, so its trap bit, nPMZR_EL0, exists only in\nHDFGWTR2_EL2 and is therefore never…","indicators":{"cves":["CVE-2026-98546"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.517Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/071f51188a5d8ec10535541255587976d12fc7d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2bc6b218717b9d08f466f88209251d54bc09b207","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bb8c90c86441c090e9036f019cf1b4d7894a2c40","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ce71865bf43f88bed9d9218e9218e537150be506","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98547","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98547 — In the Linux kernel, the following vulnerability has been resolved: af_packet: fix integer overflow…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: fix integer overflow in prb_calc_retire_blk_tmo()\n\nprb_calc_retire_blk_tmo() computes in 32-bit int arithmetic:\n\n        mbits = (blk_size_in_bytes * 8) / (1024 * 1024);\n\nIf I'm reading the validation right, tp_block_siz…","indicators":{"cves":["CVE-2026-98547"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.630Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/02afd75649a4e001031ed82153a5c39312ec0737","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/218a944b9e035d4b47d59c69af6ca13319da15fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/297acc571d5813db76b147c745b91031d5f9c960","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/56d82862a0a243ac14ba11b6d7b57ddc2d064b95","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6279211e7d2456ecd195d236c9ee5e5c6fa5a17a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b2bcc6a254d6f27823a56787668ae4ee8cdb6e71","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/be1aacff399d519cc48d6b34354a54dd79041140","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eb5b3838b9200dac04bfe33483db0ee8287456fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98548","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98548 — In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the pa…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: discard the rest of the packet on a stale-cookie error\n\nWhen an association is in COOKIE-ECHOED state and the peer sends a\nbundled [ERROR(Stale Cookie)][DATA] packet from one of its non-primary\naddresses, processing the ERROR…","indicators":{"cves":["CVE-2026-98548"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.767Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1cd246b214dc9acf4e2f11d58c035e1e672fe7d2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4498467a8af06cfa3d71cb04bd7c4170dec8f449","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6df536c5acbc0abd6f119d02e24f4a2ed97707f4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/854c053c71459f8db7ef07db9cfa4eec5f5206f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/965e21ea16acb394d5e5801998ca9b0adc669665","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c0af3fd150fdc43821df3bb77e5ec74faf4dfc7a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d68c9287b3ca0d6faadc61fbcb18d1a6b5493321","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ec23855274a73906b02f0d124fefd9cb3c008b1d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98549","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98549 — In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs acr…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: prevent collapsing skbs across boundary in rtx queue\n\ntcp_write_collapse_fence() sets TCP_SKB_CB(skb)->eor = 1 on\ntcp_write_queue_tail(sk) to prevent skbs queued after a switch to\ndevice encryption from being collapsed into ea…","indicators":{"cves":["CVE-2026-98549"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:06.913Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/08e835f5ec6e261c79d8c39f8618b3af29e3b0da","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1ae7aee395245874d797890380d9192bd858fb7e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7ba87509c54cd519e7ed362e0c85e8431f066a18","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fc6d80eb504458d6416b75a94188b268c95c6533","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98550","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98550 — In the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpec…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow\n\nCommit 48a5fe38772b (\"tipc: fix bc_ackers underflow on duplicate\nGRP_ACK_MSG\") rejected duplicate/stale ACKs in tipc_group_proto_rcv()\nby returning ear…","indicators":{"cves":["CVE-2026-98550"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.030Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/12cc3a1eac5a2a06b67a7b85f0f48ff241a94d1b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/478fb08d0c2a53002a721d22b8d6681ec971d90f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/507a27435b2bb1f22e3a3674f6a6553eb815021b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/80a9ccfc24d3776ef6753a57315e726475fac7d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/99cc2a62e07a44a22254d7beca9ef1f8ad886d0d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9b94a90651e1fa573c6ac6a5a6b269d5874df2c0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0e517961f09b9f60d338d1ea4e17aacdbf206f0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/edc6593c442278fceff0120e8cc58bc592168c35","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98551","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98551 — In the Linux kernel, the following vulnerability has been resolved: perf/core: Fill branch entries w…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Fill branch entries with a single assignment\n\nperf_clear_branch_entry_bitfields() clears the bitfields of struct\nperf_branch_entry one by one and leaves from/to alone, since callers\noverwrite those straight away. The lis…","indicators":{"cves":["CVE-2026-98551"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.167Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/24b620729e53d978b3e425f55bc66efd3bab1f59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c7de8521947a521b766979ff5c09f66fe905a5bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98552","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98552 — In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix a refcount leak i…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Fix a refcount leak in attach_perf_ctx_data()\n\nThe attach_perf_ctx_data() can race on global and !global cases.  The\nglobal case is protected by global_ctx_data_rwsem and shares a single\nreference count using perf_ctx_da…","indicators":{"cves":["CVE-2026-98552"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.267Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/23250517cd475367653f1e99396967f54c6f1b7c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5286d4eb5cd7e10d7d93c3cc596e18bc8ad80f72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cca4980630b3c7a85f53cb43c6018184ce5d4e37","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98553","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98553 — In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi->pipe file refer…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nautofs: fix sbi->pipe file reference leak in autofs_kill_sb()\n\nWhen autofs_fill_super() fails before clearing AUTOFS_SBI_CATATONIC (for\nexample, when find_get_pid() fails on an invalid pgrp mount option, or\nwhen an fs_context is cl…","indicators":{"cves":["CVE-2026-98553"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.370Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/0662b1ff9b383d5a233d344e4dc518c27a17f7b8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/34fa4c1c6e10507dc60e35a82cc9655666946cfd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3684e2273ba94553af3c5195a46a50214a1a96e3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4bcb371019097d0e357f097902587401c509bbc9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a58593b501b7be5ad2bc5181bfa8cd4599be257c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aa5e44b29ffe4eaa08cc2237fd65bc2596bc023e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f1c57f5b16bbc3571bd479c290996c4d4e1fb931","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fc4fd0281ac80b5a3c5a2330f688f0f9d2a420b6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98554","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98554 — In the Linux kernel, the following vulnerability has been resolved: vlan: ensure sufficient headroom…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvlan: ensure sufficient headroom in vlan_dev_hard_header()\n\nCallers that only reserve ETH_HLEN or less (such as llc_alloc_frame()),\nor skbs allocated before dynamic device/headroom changes (e.g. toggling\nVLAN_FLAG_REORDER_HDR or bo…","indicators":{"cves":["CVE-2026-98554"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.490Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/4ba1f57313f36a3ce6f77d593548f0c511f34aa1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/55e007fc3b4d76fa4d6b4660f6904fe6ab045a1b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5aca8e6a8ff6aeae358c1d9b65447aac416ace95","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/90d51095371d96747f45bbd8504edf6513e039ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c7ee4bea64f559ea8e03260014775b64c720cb5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ca797491f0ae4bfde9039f79f6f1ed7781c9110f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cd5dd68267c4238795fadaf02b3575ca3f8a6500","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cfba0f45553de2b803059e3d539a1e418df24da8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98555","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98555 — In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on ll…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nllc: fix skb UAF and leaks on llc_mac_hdr_init() failure\n\nIn llc_conn_ac_resend_i_xxx_x_set_0_or_send_rr(), if llc_mac_hdr_init()\nfails, kfree_skb(skb) is called instead of kfree_skb(nskb). This leaks\nthe newly allocated nskb, read…","indicators":{"cves":["CVE-2026-98555"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.610Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/060f827aa3dc47939ee306da715cd6700d129616","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/41dcae82bece9f106b4dff0ee777bba8d157c8a8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/72f9dd522f8d6c5a00be9695c7bb74631eb5069e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8b855b645841b5a04e20339a22bb6d593c9b790d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b859ba18b5a1067f71db5618c6a4a70d55fa308b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cb3528ad8bb46fa6252f5d14ced7febddc18515d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d360b31f1a3666579422872aa7d1a751e20b76f9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fec0fe6838a7f45175667701fb51abb23a6ffb1e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98556","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98556 — In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets wit…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngve: DQO: reject TSO packets with an out of range MSS\n\ngve_prep_tso() notes that the device requires the MSS to be <= 9728,\nbut does not enforce it, assuming the 9K MTU enforced by the hypervisor\nand the 64KB limit on TSO sizes are…","indicators":{"cves":["CVE-2026-98556"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.730Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/296c83b5ccc808c080865eb20fd7a477b0355bb7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2dc3ae3942e151fef254b7bbb65c832192ad2069","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c517e8755960c8c6335ebf7dae6c95c43e5fb085","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98557","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98557 — In the Linux kernel, the following vulnerability has been resolved: gve: DQO: fix header length used…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ngve: DQO: fix header length used by gve_can_send_tso() for UDP GSO\n\ngve_can_send_tso() computes how many buffers each segment of a GSO\npacket would span, and for this it needs the length of the headers\nthat the device replicates in…","indicators":{"cves":["CVE-2026-98557"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.830Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/83769c23fb1879edc916a526ba424285033baf2d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dc9e8964a21f20620dbfca4ef3e11eefa7be6451","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/feab3880a72b43913d332c06b75bb80526fa47ba","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98558","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98558 — In the Linux kernel, the following vulnerability has been resolved: net: flush skb_defer_nodes in de…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: flush skb_defer_nodes in dev_cpu_dead()\n\nWhen a CPU goes offline, dev_cpu_dead() drains its softnet queues\n(completion_queue, output_queue, poll_list, process_queue, and\ninput_pkt_queue), but leaves net_hotdata.skb_defer_nodes…","indicators":{"cves":["CVE-2026-98558"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:07.933Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/06e3f54e8b22040ada01a28343badf1990b4dd7d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c68f4157463448a76893223e117170be8374d773","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98559","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98559 — In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list tra…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix UAF on lgr list traversal in smcr_port_err()\n\nsmcr_port_err() traverses smc_lgr_list.list without holding\nsmc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched()\nto free an lgr while it is still being derefe…","indicators":{"cves":["CVE-2026-98559"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.033Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/00a59600ae72d24859d0ad1783a78bc921bc2599","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0edcc4284392b28826b5d37532b366b291e6e0fa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/34bcf11cd2528ae00bb6d764d808083c66824277","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3d35f069e1c119992000d51236dbe54da2d4e61e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3d65a2eb4449fc9658fb860dea893025d028d90e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/61cb282fe97b3b0ba32ca09417a693162bf4ae3f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a9b968e42690d784c241a0761c10253271f7df5d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98560","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98560 — In the Linux kernel, the following vulnerability has been resolved: net/rds: size a connection's pat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/rds: size a connection's path set by the transport it ends up with\n\n__rds_conn_create() computes npaths from the caller's transport before\nit decides whether a connection to one of the host's own addresses is\nto be handled by t…","indicators":{"cves":["CVE-2026-98560"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.143Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/670f303169d2d36f315c40f6d3d18b5ee8498fea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ba3d1f480c7a3fba963e7867ad6cc557c197acbc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98561","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98561 — In the Linux kernel, the following vulnerability has been resolved: nfp: hold IPsec RX state under t…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfp: hold IPsec RX state under the XArray lock\n\nnfp_net_ipsec_rx() drops the XArray lock before taking a reference to the\nxfrm_state it found. The delete path can erase the entry and drop the last\nstate reference in that interval.…","indicators":{"cves":["CVE-2026-98561"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.243Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1a983a4e14c635c40354be110cd9a1a5c94e01e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8468d05aa08dc430b5675beadf6f6fb8943f170b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c1b1639fb138db52fcfbd1747e92f2454076c6d5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd765023bb54f9650f8b9137906fb2c4a554dd1d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fe6c8ea8bfd5d1253bb0de682b1fcc2c4bb92488","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98562","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98562 — In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx time…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: libwx: fix races in Tx timestamp handling\n\nwx->ptp_tx_skb is shared between the Tx path, the PTP auxiliary\nworker and the timestamp cleanup paths. The\nWX_STATE_PTP_TX_IN_PROGRESS bit prevents multiple Tx paths from\nsubmitting…","indicators":{"cves":["CVE-2026-98562"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.347Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/3173cba1170131816972ed2b6185cb970ba8b747","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e78b95cfd5df25d0c562aaef95d3c7fe6c7e0e66","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98563","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98563 — In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY onl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phylink: record the PHY only once bringup cannot fail\n\nphylink_bringup_phy() stores the PHY in pl->phydev before its last\nfallible step: on a MAC whose phylink ops implement LPI,\nphy_eee_rx_clock_stop() can fail with a real MD…","indicators":{"cves":["CVE-2026-98563"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.443Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/4e7a4af364c2048bafb213bf0ef4a89dcbe1bfd4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/671a68654a9d319d7f0d53a6321db3d9b391bdef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a940003f44e7e441c228151dd212642152700ec8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98564","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98564 — In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: leave the MDIO…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq\n\nmt7530_remove_common() disposes the per-PHY interrupt mappings from\n.remove, but the regmap-irq chip that owns the domain is devm-registered,\nso its parent interrupt is o…","indicators":{"cves":["CVE-2026-98564"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.553Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/0d80ba0a204c6a16bd7778b50de578dff107c0fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2357c682f6eaf639dec88c68b3c0c93a3b802635","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f306e465b5a2091cd3fe3dd0feb10cfc94cfb2f8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98565","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98565 — In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix NULL deref…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621\n\nThe core and io supplies are only requested for ID_MT7530: both the\ndevm_regulator_get() in probe and the regulator_enable() in\nmt7530_setup() are guarded by th…","indicators":{"cves":["CVE-2026-98565"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.667Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/62c0e38b2e5034184d4502ce77bd178b29e59b83","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aae2a1f1e3a0ac5eeb439262a2328a2a392413ac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bd172580e624bac00d83abd5c4320d2e14d853bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c2cdef41e0b4d8ed23a5b41e6ad4e64594e055e4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e9a5298532780ecdd05c3220f3e1e3067b3537c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98566","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98566 — In the Linux kernel, the following vulnerability has been resolved: drm/imagination: clamp freelist…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/imagination: clamp freelist reconstruction requests\n\nThe firmware reconstruction count controls accesses to the request's\nfixed freelist ID array and the copy into the fixed response array.\nNeither access currently bounds the c…","indicators":{"cves":["CVE-2026-98566"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.767Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/45585c3aa285854face65293acc95eff73063d6d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b78f8f5532a077baa4aabccf657a4fb3b164659e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e0560db0ea6e10c283ebe7c259a7af8d3b6e61a6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eabd0ae3611769c826dbc118a1e240628731b348","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98567","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98567 — In the Linux kernel, the following vulnerability has been resolved: net: xps: reject an out of range…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: xps: reject an out of range traffic class\n\nOnly the entries below dev->num_tc are valid in dev->tc_to_txq[], and\ndev->prio_tc_map[] may only name classes below it. netdev_set_num_tc()\nlowers dev->num_tc without touching either…","indicators":{"cves":["CVE-2026-98567"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:08.870Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1cb8e40525a72c9f1e1cf94c68c172b3b9bbdc81","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2cc1c3977acbffc417fb5b57699d1df3dcffb5fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4da3b7b8b50f3e2fde54a4c18a82a8e3f6223910","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6ea8f643053f33622f9116e4e1db58306ece45e3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/930318290d8509e864c015fe6c9239470b3c579c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/967e10f40a0c6732db299cbe001df0e859196055","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9e841723ba482d41ecbf90241c756a16cdfea949","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eff227a3cb4d0089fbb85c73480bf8abf2e5ae7f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98568","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98568 — In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: use one headroom snapshot for neighbour replies\n\nvxlan_na_create() samples LL_RESERVED_SPACE() to size the reply skb and then\nsamples it again to reserve headroom. A concurrent vxlan_changelink() can\nupdate needed_headroom b…","indicators":{"cves":["CVE-2026-98568"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.000Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/315d42ca39f69846662961c25dcf2bb07c350d14","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/45a67662bf8ce3aa5643accf98d328dfbb47eaf6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/481506a756dcd828ef42391cb08f38d8d96d38fc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a3c5eb6e382dd426a5e7eb08608897ed57167ff7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ff022fd9d0f0282c575e11778b96bd1b637503eb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98569","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98569 — In the Linux kernel, the following vulnerability has been resolved: ip_gre: Reject enabling collect…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nip_gre: Reject enabling collect metadata through changelink\n\nipgre_netlink_parms() can enable collect_md on an existing GRE, GRETAP\nor ERSPAN device. Unlike newlink, changelink does not enforce metadata\ntunnel uniqueness. Convertin…","indicators":{"cves":["CVE-2026-98569"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.113Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1dc759571f3df14891175fc52527f7624ba01322","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2e54d53b65e296b4b4bdc2cdd3b2b58dfa8d8c5c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/63c5e48d6f7f5722a48f63e13e961dc5302894ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a3f315be9d30eeb6938d11fa17fd4b32d52f7c42","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bdd41b96e814300c66222cf4e47ecb8aef995656","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c80315da84998b69b8829785a174b0bf72a81992","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cff8b520312e750ad38967c30128e1534cbf9484","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/da2e0cfbb620b199927a1e5b93b7cfde32083c7d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98570","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98570 — In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv6: keep room for the mac header in dst_dev_overhead()\n\nThe seg6, ioam6 and rpl lwtunnels size their skb_cow_head() request as\nthe length they are about to push plus dst_dev_overhead(), then push the\nnew headers and rebuild…","indicators":{"cves":["CVE-2026-98570"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.233Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/36c07127924f11fc5741a780abcaaf808fe9ef13","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/87cd6b717e4069dca34e0866e57eaeb44d3b173e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98571","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98571 — In the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf->pa…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: clear stale buf->page after recycling on skb build failure\n\nIn stmmac_rx(), when napi_build_skb() fails the descriptor page is\nrecycled back to the page pool with page_pool_recycle_direct(), but\nbuf->page is left point…","indicators":{"cves":["CVE-2026-98571"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.363Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/0a7822e34a0bfde31b194ac3da3253e5032b44cc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/298673397ea3f6f5811b84f0d9f71eac71dda2e3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/501baaeca7d128fa0a2f6953cf5873c5b0d7cf89","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98572","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98572 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix immediate JMP JEQ/JNE o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix immediate JMP JEQ/JNE on MIPS32\n\nAn addu instruction was emitted instead of addiu, causing the immediate\nvalue 1 to be interpreted as register $at. This made the comparison\nresult invalid when the immediate operand was neg…","indicators":{"cves":["CVE-2026-98572"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.477Z","fetchedAt":"2026-10-20T03:01:48.458Z","references":[{"url":"https://git.kernel.org/stable/c/1547e9f3a7d71971216e6dba30270cae13fe4e02","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1bd91670966a7142ac94f2cebe2b5ae6bf5cb0c8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6f939529ed6c580e9b6c5daa20be67fa0b3d4cf0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/876ef04c75c2751acfd355606fca3eced71dec65","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/beeae92e70e705e90a0d6d9b3b8498ee3b92f495","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/db762fd96be225bd06161c9631160c755d891693","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98573","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98573 — In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound unde…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()\n\nskb_maybe_pull_tail() subtracts skb_headlen(skb) from the unsigned max\nargument and passes the result to __pskb_pull_tail() as a signed int.  The\nfunction does not…","indicators":{"cves":["CVE-2026-98573"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.587Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/3b4e0b0c008a8c1b474730248cd5b873026c74bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6c28c31f051dbf49c71ba7ab7bb9bc905fa1d14b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/718747afa5463d9cc5fd9a09f03b2a492edd9b78","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9c4e432132a97b82edf28fa172c39f743e6bfb26","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a0ad0473c09d2e947aecac5c82e637ec85924b12","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b2da5ed3d8c75e1b729a21b6d3beaed415e263f6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cfa643f2ca36c6f913fe1a2ceb12412ebb0fd962","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d7f474226809471dc7877435e9c492cc914df0bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98574","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98574 — In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: stop Tx NAPI befo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bcmgenet: stop Tx NAPI before disabling the queues\n\nbcmgenet_netif_stop() and the Wake-on-LAN branch of bcmgenet_suspend()\nboth disable the Tx queues first and stop Tx NAPI several steps later. A\ncompletion in flight calls net…","indicators":{"cves":["CVE-2026-98574"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.703Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/63bcc2fee6419963e45e7c2cd698fa862409601d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7e87508b5c4d81210d0a736ed01962e52f5c4c56","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f329d42423089904758f2685cda295de9bf99441","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98575","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98575 — In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: fix OOB read in pn53…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()\n\nframe->ccid.datalen is read directly from the USB response frame\nand used, unchecked, as an index into frame->data[]. A malicious or\nmalfunctioning device can set this f…","indicators":{"cves":["CVE-2026-98575"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.810Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/2450a388367231fb7dd798538f393af227c00c4d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/72b8b2126e854d6756a1aa4bdc66d7457b832294","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/74b3fbc60907ee97e3af3249091f57351b53a6d6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8a0f1bb790d964893db7fc59febda9a534db07b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8db3b1e012a8b25078dfa1efabe3d0cd2916dcba","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b61732f47316d45f27706db7812950145d3327b5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e72cbedc4596e808d22dd2b9fff666ece76f8dd6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ea82b7576793219fa10a8b545f8338998b2a9ce2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98576","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98576 — In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix slab-out-of-bound…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: fix slab-out-of-bounds reads when logging service names\n\nnfc_llcp_wks_sap() and nfc_llcp_build_sdreq_tlv() pass non-null-\nterminated strings to pr_debug() using the %s format specifier.\nThe buffers are allocated via kmem…","indicators":{"cves":["CVE-2026-98576"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:09.930Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/4262b12277a3e056c95fc49e9c4d7bd97035d16c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6d4ca872830e46fcca9c086bf19fa9bd2faf09d2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/75bfd9ef4da2fb49dac1f19880d2ac4ccd07b45b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/75f7c5a42fa1483f5912279a749417c284ad708f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7dcf371a35632f035baf77bcf2c129165f772ce4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8978dff632519712d1fa432991e1f2e857f90239","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8afb6c194f5781798d3ab3edf243cf5a24a9d1f9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a143f7835faa4fe0178448289feea4f84eeee8d6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98577","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98577 — In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()\n\nnfc_llcp_wks_sap() compares only service_name_len bytes, so a short\nservice_name like \"u\" matches longer WKS strings like \"urn:nfc:sn:snep\".\nFix by requiring…","indicators":{"cves":["CVE-2026-98577"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.053Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/0a0412745c86acd089c6460da715ab966b1615e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0c83a8a45fed256ccc5fe7160b436b671fc79fb8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/32b5f0b338bf59391a1cff9a6190a72c4d2c1ba8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/408cff6bd60636df201274d320edfdfde9ed41db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6fad2c34d451d11a9f3f946cae1105fee91d96b8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aa555ed5ed0d15efbaf27e0e9f152a6df715278a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bf41af8f910cbb5d776a1dfa0671d31a7e262e28","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f234197f3bda3aea5d4b1e591d6bcb3660a8b3fc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98578","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98578 — In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: st21nfca: validate ISO15693 inventory length\n\nThe ISO15693 inventory helper removes a two-byte prefix without checking\nthat it exists, then accepts a one-byte remainder before reading data[1] as\nthe DSFID.\n\nRequire the prefix…","indicators":{"cves":["CVE-2026-98578"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.223Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/3af2ea4035581a1607d9830779c187a0c7e225aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/57d183764f3002f9625ee4deeeb20716c519534e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6353dae51bc9b3cad13c9d890b53311a46c96b4e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7f2ea5ed588c03d481f0301e6c3d4240132383fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9fa21b0f78adb514e3bd96a505ddb752e9727ff3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a86987d03a4d39acdbe4533d83db4d656ea36c59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e47b2a350bb0ff123434ec5484c6dc3333b0727c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fdd95e819d828c975aaeb258a3fed5dd7fd136d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98579","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98579 — In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix sdreq TLV list le…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure\n\nnfc_genl_llc_sdreq() builds a list of TLV nodes while walking nested\nnetlink attrs, but 3 error paths (nested-attr parse failure, TLV alloc\nENOMEM, nfc_llcp_send_snl_s…","indicators":{"cves":["CVE-2026-98579"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.363Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/08d2c069239ab425fdd333784a6a3b3e034e4aa0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0b01a946b0f234f5badd25968610b585a4895f08","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5b1eca82085134bd92cd3810b0ef003c91e3f668","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/66f4300206b82b0b143ef0d9be90cd8d29f23a47","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/755bfc409748d8f3df64eb0eb26926270de3dd77","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cbde7f5d326172d6dbb55cca0df42fa7e1ed8115","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d3f60a7fc291d08cd9192a3b4cd5d3a223fa7d02","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e43ec0191c1630f41e7043ac729ea6f1b8044a7f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98580","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98580 — In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix race condition in…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: Fix race condition in accept_queue lifecycle\n\nIn nfc_llcp_socket_release(), sockets and listener accept queues are\nwalked under the local sockets rwlock and bh_lock_sock().  However,\nbh_lock_sock() does not synchronise a…","indicators":{"cves":["CVE-2026-98580"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.483Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/41256821762a7114906b178826d17098e2fa5992","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/53867f6acb1af7f12d6485fa8a2819318f89083b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/54adcabb0f1deef1bdae5fc64779ed6d442721c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7c938aad5108382c6ad7453c4b5ee8ae3f3252ed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3eef2f988a3db9690369d7cef9a3344dd9788d3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2093a0981138876212bc5f473bdbfba0786e064","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d5e1c92d09caed19f2988739695ce611a86ba6f8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/da8a07757383614a8380a0f7dd54749d2687b82e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98581","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98581 — In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix list corruption /…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()\n\nnfc_llcp_recv_dm() handles DM(NOBOUND)/DM(REJ) for a socket that is still\nlinked on local->connecting_sockets: it looks the socket up with\nnfc_llcp_connecting_…","indicators":{"cves":["CVE-2026-98581"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.610Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/320a2ff49bdce3f9a437b9a9ff341ff27d3bdbf1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7fb2c0eeb79bfad64065f539a453138abd0edda6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/812731dd8511f5768f4ff279b3c18d85cd21da4b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b94cf09720543cc34256c7aa88f8059cbe7c0419","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bf1460acdf8cf5a07c819f59785d40f20d113099","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c1e9ed52a6697354366dddf190fbacee8ed2f7c5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dba1d9c7134afcb4b1bfad8c1b1b3f0ab5189b08","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd2d24add86b3b63cd87cf2feff98ae119ba19a6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98582","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98582 — In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate received…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: st21nfca: validate received frame size\n\nst21nfca_hci_i2c_repack() trims a received frame at its EOF marker\nbefore removing byte stuffing.  It then assumes the truncated frame\ncontains the LLC header and two CRC bytes, and it u…","indicators":{"cves":["CVE-2026-98582"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.743Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/57919d0662d8856211b794140172e51ca389f23d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7b996cc06dda54c02a5aa607bda01109f0ac51e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8934d2889ae16a7c77520e002398d0689c1ecea5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/91be5161f37b0a2795ad6806d69be5fa74522e5c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a653c01ce447f10c36b901646888c0330363af4f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d0596ee6c4b928a5c288790522a7495ee867da72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d4008c3499dba7829bfe002edd99a8bff8ae3a7c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f526c218a149a30f110ce434ff17e033042404b8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98583","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98583 — In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: validate helper co…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nfcmrvl: validate helper command length before pull\n\nThe firmware download receive path removes the NCI data header and\nreads the helper command before validating the remaining packet length.\nA short frame can therefore reach…","indicators":{"cves":["CVE-2026-98583"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.867Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/4d4601e182c8567329be7d919669ec4d847ddd93","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/686f942332b1667f13f3b8d6a2f50bcfbf42e277","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6a17a5806e9fcd99cf0dd30c3e6301f2aa1fac3c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/842c0603cfa49530ef081f181a2ddbba77a37231","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a4e56f57dd04d8f9bc6bc55f90f3d129da759ec9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e4b012240c8aaf57cec192234c24e0db5f531ffa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ed2e00bb22c73156bf8030b6204deabb25cf4eb5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f15ad9d6e9173a037587dded77c904fdae8df380","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98584","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98584 — In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack i…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fix potential stack infoleak in em_text_dump()\n\nem_text_dump() allocates struct tcf_em_text on the stack without zeroing\nit.  strscpy() writes the algorithm name and a NUL terminator into\nconf.algo[], leaving the remaini…","indicators":{"cves":["CVE-2026-98584"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:10.983Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/0b160417826d22f24fc31a5b9cfae3b14aa70f76","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9923e1c537f91f3530b52d4efce85f3d9c131bf8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9c572a83037a7dcd653ba3a9cc468c16b857d0c9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98585","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98585 — In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Avoid rounding zero…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: Avoid rounding zero ring sizes\n\nroundup_pow_of_two() is undefined for zero. ethtool permits a zero ring\nsize to reach the driver, where the minimum-size check should reject it.\n\nLeave zero unchanged while rounding nonze…","indicators":{"cves":["CVE-2026-98585"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.083Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/0160953d8eec75c3c55562158c46442ff1fd410b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/491aa3167ae02f219cb2d2de6f4196d28dca03be","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/92c9f2ea634d92adff5403d231ebeda683c5685a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98586","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98586 — In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport bef…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: hold asoc or transport before mod_timer() in timer handlers\n\nTake the association or transport reference before rearming a timer in the\ntimer handlers.\n\nThe existing code calls mod_timer() before taking the reference needed b…","indicators":{"cves":["CVE-2026-98586"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.180Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/27c51a9b55b227309161c903f9ecfbf022516bc2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/35bf3b23c9a871f44c1453d85f8332be4e088dda","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d3d39da054476e7aa05cd877b93ca73a9a77434","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cae23ae3f7887a1cf8a75da38edcebeef695040f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d18cb8fd1b6ba95c85de644203cfe1b071ff0c0f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f7dea7eaea20fe9b80f8f77ba44d02b4a17f8050","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f9d929026d487a988bfa12c065f892e823e5b6ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98587","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98587 — In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transit…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfirewire: cdev: fix back-transition for iso_resource_auto client resource\n\nThe todo member of iso_resource_auto structure represents the state of the\nclient resource and normally transitions in the following order:\n\n    ISO_RES_AUT…","indicators":{"cves":["CVE-2026-98587"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.297Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/c6b51091cafff9ce6c03c1416aa13864d17ab97c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ee1df60a0d0e8ab4b00137135733bdadd6d33dab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98589","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98589 — In the Linux kernel, the following vulnerability has been resolved: bpf: Reject pkt arguments in mut…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Reject pkt arguments in mutating subprogs\n\nThe verifier tracks changes in how PTR_TO_PACKET registers'\nbounds are modified across subprog boundaries. PTR_TO_PACKET\nregisters are actually passed as PTR_TO_MEM, which is assumed…","indicators":{"cves":["CVE-2026-98589"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.513Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/0b6b2bb9b90ad1e2d94d18f626258a1dbbdee0ea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a6c1edfbe240e4377038a0e1d233ad81fde9a21b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98590","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98590 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sock context code g…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix bpf_sock context code generation\n\nCurrently, the ctx access code reads the rx_queue_mapping\nfield with either a 4-byte or 2-byte load. The rest of the bits\nin the register are marked known zero by the verifier. However,\nth…","indicators":{"cves":["CVE-2026-98590"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.610Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/4a41d064facc3330e176ecbbf5b0026ed18a5c69","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4a4852376e3a2727ea40e61143d6d7c22bb6dfad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/70288599d1754e157df8326239316dbdf08ea33c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/84ebb991ae985149079ae9ab51b7e3ba25a9ff53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b3f37afc7fd7c52bc2114310aff1eb24c7cd4d73","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d95dd5a6c6cd08d5ae466d3aed27b3cf59155a6c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e3ddcf4aeb342d4de2e5761c7042270d454752de","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ea4dc96c902ccfa49dd3e4f23c443dab4a74b018","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98591","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98591 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bounds check for skb-ba…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix bounds check for skb-backed dynptrs\n\nThe skb_pointer_if_linear() function checks whether a\nmemory region of length len starting at offset off into\nthe skb is in the linear area, and returns a pointer to\nthe region if so. T…","indicators":{"cves":["CVE-2026-98591"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.727Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/1196903a27cac5c929c7517e987a8d159f20c5e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1b923538598be768e9f2f258a77a083d00e0c78b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/37877a24758068742fef687a7cf5362360dde1d1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/39ffceaddb10753eac12785dba6ac0673860b4ac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ed6eec97b534979dcf28b40c389cee57bd6561d4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98592","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98592 — In the Linux kernel, the following vulnerability has been resolved: net: spacemit: clear TX descript…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: spacemit: clear TX descriptor on fragment mapping failure\n\nemac_tx_mem_map() writes TX_DESC_0_OWN into the ring descriptor for\nevery slot beyond old_head as soon as that slot's memset()'d local\ncopy is committed with \"*tx_desc…","indicators":{"cves":["CVE-2026-98592"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.830Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/2d14720beb58870b15a52b236c3ab0be0e06e915","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3001a103a367c6051c43aff363b6979c10e65347","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ca9986cc824f2feb79b4a83e5f6f4c24c2140448","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98593","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98593 — In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer der…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/debug: Fix NULL pointer dereference in debug_info_copy()\n\nWhen debug_register_static() fails, it clears areas, active_pages and\nactive_entries but leaves the area bounds unchanged. Copying such an\narea, either by opening its v…","indicators":{"cves":["CVE-2026-98593"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:11.933Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/012bfcd5a51082d5a65f096dfb9ca652b5267965","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/13decd3b3b3a4d8a2e603fb8c9ffde0c6be3c225","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2de9c458cc49d8db6408a7c5fbf0c7c94fe4d52b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/33f706884821da9cb55b650b7b1d4f2bdf800137","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9c6af88fbefbe77608b77409df23a1617e28398c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a19bede30f0da5ae56782edac62b5998a7434cba","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c593f38e1cdb92f87d01be4c4e5ac12417b1454b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98594","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98594 — In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntg3: clean up PHYLIB resources on probe failure\n\ntg3_get_invariants() can register an MDIO bus and connect a PHY for\nUSE_PHYLIB devices. If tg3_init_one() later fails, its common error path\nreleases the mappings and netdev without…","indicators":{"cves":["CVE-2026-98594"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.043Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/0844402326d4e48a28688f93ec6442e93bb442fa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6515c41503eef849abd2c7364f34e4bb25110f90","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ce86d6929d03e6b0abcb781dfa50f9f0816bff78","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2abb0013b933d59ee441185df0eca9e8c0b33eb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e766321288b507afb70d2bfef6ba443213329f79","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98595","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98595 — In the Linux kernel, the following vulnerability has been resolved: udp: remove a disconnected socke…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nudp: remove a disconnected socket from the 4-tuple hash table\n\nA UDP socket bound to a specific address and port keeps its entry in the\n4-tuple hash table after it is disconnected:\n\n    sk binds to 127.0.0.1:21001\n    sk connects t…","indicators":{"cves":["CVE-2026-98595"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.163Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/9e95b1a94c9c49b4ba722251bbca2759b9c51737","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c21daf37d5ce9a4e234b7c42238ac1e6041e28e4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d1b5fd969cc53f29d02b82b05a45135de4a6087a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98597","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98597 — In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receiv…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: sr9700: include receive overhead in the length check\n\nThe receive fixup subtracts the Ethernet CRC from the reported packet\nlength, but compares that payload length against the whole remaining\nreceive buffer. The followin…","indicators":{"cves":["CVE-2026-98597"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.387Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/05b442709bd5256c6c0e11fe56b9a0cb2455c245","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6ab6c9d120b30c94579192ef83a581a3dda6d79c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8488779d9bddbdb33588c9fc2c0657a3da773f61","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/92d88c88390fc62444c00a1a22078f838e03891f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9b59b00890c5dea355b4cc8795ab8eeafc044e48","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/baf07d5153d3af8f98e65e2d3566bc0d50c4e3ac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c06bde80ae7a7b595732f7cabcb92cf08db9d56a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e1f5b74edccf4c9b671b6bce4435a98746fe5167","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98598","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98598 — In the Linux kernel, the following vulnerability has been resolved: ipv6: Prevent rt6_insert_excepti…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Prevent rt6_insert_exception() for dying fib6_info.\n\nBefore the cited commit, fib6_nh_flush_exceptions() always set\nfrom->exception_bucket_flushed = 1 under rt6_exception_lock to\nprevent rt6_insert_exception() from inserting…","indicators":{"cves":["CVE-2026-98598"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.500Z","fetchedAt":"2026-10-20T03:01:48.459Z","references":[{"url":"https://git.kernel.org/stable/c/0346ec2f080b40d95ed05b853bb9226289e75212","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/649ffc76ed5483b2caf35ed90d3787538efc4e53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e03e77071e75ce726d877f0a4349a28b6e1f487a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98599","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98599 — In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-negative offsets…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Reject non-negative offsets in stack_slot_obj_get_spi()\n\nbpf_get_spi() computes (-off - 1) / BPF_REG_SIZE using C division,\nwhich truncates toward zero. For off == 0, this produces spi 0, the\nsame index used by the valid stack…","indicators":{"cves":["CVE-2026-98599"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.603Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/79a9172f3ab4ad8392c5e5c8944b9b7710ade620","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/89a7241fc7ecc1b5e47c3f071081e314523b8d9d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98600","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98600 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()\n\nWhile rfcomm_recv_frame() verifies that skb->len is at least\nsizeof(*hdr) + 1 (4 bytes: 3-byte header + 1-byte FCS), an RFCOMM frame\nwith an extended 2-byte length…","indicators":{"cves":["CVE-2026-98600"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.707Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/6d91041bb38b97e2feb625123cc0529d7b83a0e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/71ccacde407b7d8f0ef48974a0d2524602fd5c44","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/76876fd26569302d26d91cbe8b75fa8e66cf8969","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7a1781a2f3a9667b3065d402d1f11986a2363e08","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9240fc1f2cde5331c61608da21b00394602ca762","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/97711b964877242933484989224a3c4c5d88a5ee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/be00deee60044ffa820f9436415caeb665b2cda0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c25587fa26761e623198b4f47151fe79d09ccde6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98601","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98601 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel_pcie: validate device-supplied DMA indices\n\nIn btintel_pcie_msix_rx_handle(), the driver processes RX completion\ndescriptors (urbd1) written by the PCIe device into DMA-coherent memory.\nurbd1->frbd_tag (a 16-bit…","indicators":{"cves":["CVE-2026-98601"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.817Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/37a11129345337efd6eef8e62b03b6348cd0dd8b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8ec5838a35b03ac0cf3602452a369898051ffaf9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b29b70bfa12133423924fcd0327c19a802f7e368","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f42cd95e679d5b78611cd2208cd1c41ad0045ffa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98602","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98602 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix out-of-boun…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough\n\nFix multiple out-of-bounds reads in Bluetooth BNEP frame processing:\n\n1. In bnep_rx_frame() and bnep_ctrl_frame() (net/bluetooth/bnep/core.c),…","indicators":{"cves":["CVE-2026-98602"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:12.920Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/035f9b1809861967e58ce652680d70ea1502058f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1e7aebc188f889b56c3aaeb6133ef6d77022c887","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3e605ff5932afe0970c2beca66f2f1ba2babe4dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/667aa703e11cdc237d169393bc6a5ea9acbb33c2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7af80ad2cebfe2f1879d6a39a1aaa061d9c4e1ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8f31031326994d1abfcc6ebb6927ef96e51fb9ff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ad0d2d4ada51321db787262ef343193c712b76b5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f0ca020cbb9bb7f3f4ea8ba1dfcf30a282aec91e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98603","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98603 — In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when clearing…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\novpn: replace bind when clearing stale local source\n\nThe UDP output fallback clears bind->local in place when the remembered\nsource address is no longer usable. The bind is RCU-published and read\nlocklessly by concurrent TX, so an…","indicators":{"cves":["CVE-2026-98603"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.040Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/72bd1bea37ea2c8553938f086bf48ccd2147dfe1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7d8104988f423572df1f3347ce578037b1043f34","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c44a04722f7dae9a45a101b8e100931ab59f1c18","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98604","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98604 — In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\novpn: replace bind when learning local endpoint\n\nstruct ovpn_bind is published through peer->bind with RCU, but local\nendpoint learning updates bind->local in place under peer->lock. UDP TX\nreads the field without that lock. In par…","indicators":{"cves":["CVE-2026-98604"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.140Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/21dbc9f4d0bdd3b22f91beabc7840064bf11594f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aea934a221ec6a867221e5b765f65f1857befd53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e283009151d3d131447c2edda500199c5fda5f72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98605","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98605 — In the Linux kernel, the following vulnerability has been resolved: drm/bridge: samsung-dsim: fix TE…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach\n\nWhen the Exynos DSI driver was generalized into samsung-dsim, the TE\nGPIO acquisition was switched from gpiod_get_optional() to\ndevm_gpiod_get_optional() while keeping…","indicators":{"cves":["CVE-2026-98605"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.237Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/5759bbef951c39d264ac0f47daa4137d01403aea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/77a43e00c57486a5212ef22d4665cafad62a5d4b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9b796251c3cca45a33a5c859c6818c58aa982277","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ada667890773e033d2f40dc94176e3beb930b516","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ebffd70e4877bb7554974cf975a27872f2bb225f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98606","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98606 — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: release the GEM obje…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: release the GEM object on virtio_gpu_vram_create() errors\n\nvirtio_gpu_vram_create() frees the object with a bare kfree(vram) on\nboth error paths after drm_gem_private_object_init() has run, and on the\nsecond one after d…","indicators":{"cves":["CVE-2026-98606"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.340Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/036d28db1818af2f9d80db771f5405da84d7732d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/03bdbf182082694ab2add620d85f1a8b8f51bbbc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5118b5fdf1eb9922a0cdd2afd25252081e2d4302","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5c2cb3dd1447752b73d4f44d6b7434bc5259bfec","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7c8deb77d05bcc8f79e255f669d82ec6ce91be12","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/977c2934064969503cabf98b1135d202ff62822e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a9bb8f8fd5694185c2f71ff91869afb300aab392","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98607","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98607 — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leaks in…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()\n\nvirtio_gpu_resource_create_blob_ioctl() calls drm_gem_object_release() on\nboth the virtio_gpu_resource_assign_uuid() and drm_gem_handle_create()\nerror paths i…","indicators":{"cves":["CVE-2026-98607"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.450Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/02df4e24dc4c0bf5b0425a6acabc5201d7f04fc2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0455867bbd95ffa9d9db0a1c6dda500f8126232c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/24b6d5c7641412c9ebef0d4c8b888d49a0e6b880","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/73ea38a89b923fa08047885a0845d1cd89261ead","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/81c6769e069d703154087377d1749af2f1b74e49","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88c60c06a2a5244f5dd32ec098e633add114890f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eea473532a286cd1b13cddbec5c645989f43a3aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98608","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98608 — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak in v…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()\n\nvirtio_gpu_resource_create_ioctl() calls drm_gem_object_release() on the\ndrm_gem_handle_create() error path instead of dropping the reference it\nowns, so obj->funcs…","indicators":{"cves":["CVE-2026-98608"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.560Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1586ee6107acab3b14510ac6af939f1253269df8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/477bc3068fc3777b9d8ffd79e265b0dfdf2d3a6b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/574ae9fa5fd3658bee23cb544fe5a0d1d750016a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/749d8bb964b3414ef967d5ec80f2f1b5b3a510d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/77dee8e9106d62bf4f51b646c801f51f8ee77339","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/83c899104496677068fbbd2e42f28fd625f9cd85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b516446a25bf365cfffe3d7884ea6637f7f70862","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d33d5ef8225538f76e4598c09e2074834667bb8d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98609","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98609 — In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/virtio: fix object leak when drm_gem_handle_create() fails\n\nvirtio_gpu_gem_create() owns the reference taken by\nvirtio_gpu_object_create(). On the drm_gem_handle_create() error path it\ncalls drm_gem_object_release() instead of…","indicators":{"cves":["CVE-2026-98609"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.677Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/13423a058187c2039aa8cb235c916be4477221b7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/264ae8ac8fd625b6c118baf16c111adeee2ec632","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/36570ef2244cc4d7563b1f0157bc0f032498638c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/372e9c3d45f664a2c000427ccbf6cdc2f99b3170","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/687be2f8b5e0e0ca9a7028f8f6413d0ed3fbb9dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a93dce15dfef200c346b050a2acbed516cc62706","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e2edd2d78d2cf8446de017adec9598feefed3297","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f75066c79d1eec453c0d386ef8636873d1e11f2c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98610","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98610 — In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: bound the c…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget\n\nhfsc_classify() applies the \"filter may only point downwards\" level check\nonly when the filter result carries no bound class. A filter created with\na fl…","indicators":{"cves":["CVE-2026-98610"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.793Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0fa25ba50a382d79c0cf060214c2095756836f5f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1301a1292c6742b4c96a18715d49f89c3caca0d7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2bd20245dd658789d8cccb37697967b4caba6ad8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/30d7fea767e830bd81ac2f73d2e33c877cb2e679","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8a60ade2277e1f0e0d0578d565354e52292fa46d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d4fd251e3311727c32af89344d3332f788c153a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e8f9979286f70dfbfe0552e2a63000950841bea6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f476fb656ca2326d7b2eba98d03ced1cbcf5cd99","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98611","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98611 — In the Linux kernel, the following vulnerability has been resolved: bpf: Check params size before re…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check params size before reading reserved fields\n\nbpf_crypto_ctx_create() is a kfunc whose second argument is declared\nwith the __sz annotation, so the verifier only guarantees that\nparams__sz bytes of params are valid.  The f…","indicators":{"cves":["CVE-2026-98611"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:13.927Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/86a0e945fb645ea90233fde239cd2de79f01974c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a11212910cf09b2fe8db9afa41ef60c4f81879c5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cd12d3e08620257fbcaa262785d7f4b9473afc7a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e03253f5d65ebcd2a6d479f140c3bd9c7e4fb84a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98612","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98612 — In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: bound the RX pac…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: catc: bound the RX packet length in catc_rx_done()\n\ncatc_rx_done() walks a multi-packet URB, reading a two-byte length from\neach packet header. Its bound, pkt_len > urb->actual_length, ignores the\nheader offset and compar…","indicators":{"cves":["CVE-2026-98612"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.030Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/21e206dd88b3de6e36bb607dec3797c59bc3007b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2f87bbd5a7bf6ee79d598f7e22cf77810d29ae87","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3942557938f846e7481f6ccb2b41ccbdee61baa1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4cc0a8eb2f9336cfa3e4ac329bc5585ca970ced3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/801e21cf7dd6bcee31db907625d5045f21c9c1d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d4be026bdff2c1da7b6c7e01c0a47f2df409e97","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d565b6b72fe3f41fd43636e143072848105189f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd9c6f8f05170223edec2dac476606cd40d9acb7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98613","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98613 — In the Linux kernel, the following vulnerability has been resolved: bpf: Bound ownership depth throu…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Bound ownership depth through local kptrs and graph roots\n\nProgram-allocated objects can own other local objects through referenced\nkptrs. bpf_obj_free_fields() follows those pointers through\n__bpf_obj_drop_impl() synchronousl…","indicators":{"cves":["CVE-2026-98613"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.150Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/4105870a4b8afe852aeb24a6dd58e1836cc4ce58","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/92aa0502c781d72bb9685245c3280efb3766a110","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9c11e543fec32e92b3aa3f693339ca3ee79ea9dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bfc888f04588f591851e95c974954cfca58e6c19","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98614","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98614 — In the Linux kernel, the following vulnerability has been resolved: sctp: avoid livelock while updat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: avoid livelock while updating retransmit path\n\nsctp_assoc_update_retran_path() can loop forever when every remaining\ntransport, including retran_path, is SCTP_UNCONFIRMED: the state check\nruns before the wraparound test, so t…","indicators":{"cves":["CVE-2026-98614"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.267Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/173610fff55022a5ad1579fbcc7faa97467b58b7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3fe624c3843694ab096fdb198526ba0c659febbe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/43410c1f2db53516e95ddd7e5b4b02f495b78121","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/83b1a7f9e718828ef364a7b004254ebb2d0035fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c9338057df1025f578fe7d0ff08bada87b8b838d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2c31b837406395e576afeb25958c98e9938f3f6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d893a7cc1cb41dd510f338bb2bfd8f29b14eaf49","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ddc34cc0834c873871e88b055ee6a260676efe97","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98615","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98615 — In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Set AW_FLUSH_MODE al…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox\n\nWhen tearing down the FW mailbox Rx ring, fbnic_mbx_reset_desc_ring()\nwrites AW_CFG with FLUSH set and everything else, BME included, cleared.\nClearing BME…","indicators":{"cves":["CVE-2026-98615"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.387Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/8947f13e436a4ff5eed9f8f019b2865a07af4bb2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8a052cd4b2caee1f90cf0e3874377066939c90e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a969db6548a1b046cd1423701f5f9c3f5794e90d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ed4163f6ba9b52bfd6216d5215ee7b8eb5072411","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98616","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98616 — In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset num_napi when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: reset num_napi when the napi vectors are freed\n\nfbn->num_napi is the count of live napi vectors, each of which owns an\nIRQ.  The PM path had freed them without clearing the count.\nfbnic_pm_suspend() tears the datapath d…","indicators":{"cves":["CVE-2026-98616"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.497Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/4bcc4a92c603fe7f062cea22e20da2e0ad6b12c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4f4b767ffea7653a00904383908536e754f8ef5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c5b5aee41b9f5ed0743344be1c7b544555fa3cb9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98617","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98617 — In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: use the Rx queue nap…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: use the Rx queue napi pointer to find the napi vector\n\nThe queue management ndos pick the napi vector for an Rx queue with:\n\tnv = fbn->napi[idx % fbn->num_napi];\n\nThe issue is this is only correct in the cases where the…","indicators":{"cves":["CVE-2026-98617"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.600Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1fb569cf3bf97e552f465b2c719e36b48ae7c18b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b5d9e9d4d0c13bc8b60d8d97e7a07fb25fea639e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98618","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98618 — In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Handle maximum stand…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: Handle maximum standalone channels\n\nStandalone channels use one NAPI vector for each Tx and Rx queue.\nfbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A\n64-Tx/64-Rx configuration therefore records 128 v…","indicators":{"cves":["CVE-2026-98618"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.690Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/16ff1023213cc39c1a7ce737205c2a1a53c3a716","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1f4c73064a50f53d596c6f1d06d2d700f43c4b32","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6c903188b67617070017305a325fa326f270a43d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98619","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98619 — In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnl_lock for…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethtool: keep rtnl_lock for the ioctl self test\n\nAn offline self test that brings the interface down and back up with\nnetif_close() / netif_open() requires rtnl_lock for both. Since the\nethtool IOCTL path became rtnl-optional…","indicators":{"cves":["CVE-2026-98619"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.787Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1b82958f3f035df5ccaab5430a2302f08a5d5351","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4ca1503491f1f25a954c13ac5775bf6775c5abc8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98620","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98620 — In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: unre…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure\n\nIf register_netdev() fails for one of the MTK_MAX_DEVS devices in\nmtk_probe(), the error path jumps to err_deinit_ppe, skipping\nmtk_unreg_dev(). The previ…","indicators":{"cves":["CVE-2026-98620"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.890Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0fdb944d4df02223c67d5e65c4c134ecb57a5668","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/245bea0c7ab278150c70366bdeb69b901327133c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/310d1ac61a4d5a2ca8356a3a48d263acf54503ce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7254b702e556158e34b4d7c168b5d8e7da5978af","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ab3bde3b3e56331b4f53a1f6cf4e5e9d1c14c1a0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98621","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98621 — In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gue: reject invalid REMCSUM offsets\n\nThe REMCSUM option carries an absolute checksum start and checksum field\noffset. gue_remcsum() passes them to skb_remcsum_process(), whose\npartial path stores offset - start in the u16 skb-…","indicators":{"cves":["CVE-2026-98621"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:14.997Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1d664be4ca49d1696e85239236f4988dfc4653c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1eeec0c51fd5598da44080ed96bbd9880021c28b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2566866fc30965d915d0b52b5c3323b362619f0e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/40aeafbcbc7bc4018e8f74bbbb4d29ed8846f57f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/43efb1f997e976f386aa89716f55870cd2cff9ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4b9bc21b2396c396d88dd909caaf73d5be6ff593","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/97f907203321eee2cc9132d5c9eb47698fb41d35","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c20f755338ca234e523dfc943719f194dfc1f903","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98622","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98622 — In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: don't WARN on…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ct: don't WARN on benign flow_offload_alloc() failure\n\nflow_offload_alloc() returns NULL when the conntrack entry is dying\n(e.g. raced with a conntrack flush) or when the GFP_ATOMIC allocation\nfails; both are expecte…","indicators":{"cves":["CVE-2026-98622"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.117Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/00734f3684fcec42c319bedfe68a5d357c720b53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/424ba52c0058deeb940d02cba52eb0aeb288db33","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/47abe7a5c4eb53269aca3506446f851572a059a3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/650787233c2fd6e515a7c5f371019a9fa080ccd2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/af475f599270e59313552e6c6f3af8507da672b8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d512c484bd93a5f2794aa03c9faeb7bcb82dbd4a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d805560ad69cb266d669341ca01e26bffb0d2c67","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e8fcf3f08834e939b797311742ee72b1e2a08096","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98623","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98623 — In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update\n\nIf list_for_each_entry() exits without hitting a break then \"pstate\" is\nnot a valid pstate pointer.  Introduce a \"found\" variable instead.\n\nThe check is rea…","indicators":{"cves":["CVE-2026-98623"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.237Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0d096a7f7d79207490858dde731b16da5337e90c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/391517da7fd54ae40e4a7fe1cc696217343b0061","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/492e9cfa12f35f7946ea1b78a19f1f9337d62248","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5315c7bacfe274ddfe649d9556e9a341ffa812da","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d550924961f61a491dd95359c63494fa8a23d9f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a867abcfa85ab487066c3d3008a1ba905da04113","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aff09d9e37e02dc60bde79035ac15b136d602259","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/db5dd9f47b4df1be322f498d846e9a82940a7390","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98625","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98625 — In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish HW…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: flowtable: publish HW_DEAD after worker is done\n\nflow_offload_work_del() sets NF_FLOW_HW_DEAD before the work handler\nclears NF_FLOW_HW_PENDING. Once a flow is both HW_DYING and HW_DEAD, a\nconcurrent garbage collection p…","indicators":{"cves":["CVE-2026-98625"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.513Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/00e452a7ca9fda135ea3d04a11128d5088e354a8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/56f39c7d139bb76072efe2fb3dcafc13ba915ad8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0ef9450e93f2adeb77593db14c2ac7c6c8f5060","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b4f0f05dfbe836a171bff261f17d098a4d5461ea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d644b23afe1ef509c9961a6d84a093c2587edf02","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e20701843032c438f879066a77ea85e361c6b999","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f26652e99f519e6bd34f8a9b48fbb33c603585f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f92e8f39726ba68a7c42c6b7566be687c8161579","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98626","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98626 — In the Linux kernel, the following vulnerability has been resolved: bpf: Restrict CO-RE poisoning to…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Restrict CO-RE poisoning to relocatable instructions\n\nCO-RE relocation records can name any instruction offset. When a\nrelocation cannot be resolved, bpf_core_patch_insn() currently poisons its\ntarget before checking whether t…","indicators":{"cves":["CVE-2026-98626"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.640Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2d7d04357c41aa49a5ac658fcc207439f2ad6456","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/394ae398337c5f87e567f6cd63b937fc2b2f6ddc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8e4cbcca1e0a2fc5e6c8edb68e0cf5f2587f9319","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a0b79cdfcf34b53c85bac2d3cf022fc1342eeca0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a8c47e62d9aea2d47a09e06c1682c59c21b92449","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d3219c229d16900cef936adad28633c98946e432","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f2a24101e89dd0804e717da7c1bd6af513698aa2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98627","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98627 — In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve packet pointer cla…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Preserve packet pointer class displacement in regsafe()\n\nregsafe() maps packet pointer IDs between states and checks that each\ncurrent register range is a subset of the corresponding explored\nregister range. It does not, howev…","indicators":{"cves":["CVE-2026-98627"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.760Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/091b40845bd3cf96791171ca95113e9184ccb596","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd16449a9b3b31a8f18944c2f0e29e4e218ca2cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98628","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98628 — In the Linux kernel, the following vulnerability has been resolved: bpf: Make post-verification inst…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Make post-verification instruction rewrites killable\n\nAfter do_check() returns, the verifier runs several instruction rewrite\npasses. Some of them patch or remove one instruction at a time. Each\noperation moves the remaining i…","indicators":{"cves":["CVE-2026-98628"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.860Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/261b61d3735b042ae25634f795c4540be0fc140c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/56dc616d7a1f7d134d3e101c455e62b0a24d0cfd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98629","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98629 — In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix manual h…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_u32: fix manual hash table handle IDR aliasing\n\nA u32 hash table created with an explicit handle ('tc filter add ...\nhandle 801: u32 divisor N') keys its IDR entry on the raw handle, while\nthe destroy paths free it u…","indicators":{"cves":["CVE-2026-98629"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:15.960Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0a5f5d9e94dead312d32c366b917c64e552b72f7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/0fac292d93fdb313099e98cce928b3a524c92c94","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/21fc07924e996e1e661268ca269c86b8d59d25b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2f898f9ec7c73c5697ee462681e7ea6984ee1f3d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/54a454c5e41f5e2cb70c8163140ce095c5d5eefd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f6696481eedfd5752b4b56eed715d0b0fe48b9c5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98630","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98630 — In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Fix payload page poo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: Fix payload page pool error cleanup\n\nThe payload page pool pointer contains an error pointer when its\nallocation fails. The cleanup path passes that error pointer to\npage_pool_destroy() instead of destroying the header…","indicators":{"cves":["CVE-2026-98630"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.080Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/4bab07f7b74e59bb26032fa5ff6969d63e1c52ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f4277b19edbc6abc9e1db7d6f6148608e8cb3c34","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98631","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98631 — In the Linux kernel, the following vulnerability has been resolved: xsk: Use a 32-bit compare in xsk…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Use a 32-bit compare in xsk_map_gen_lookup\n\nxsk_map_gen_lookup() loads a u32 key and compares it with max_entries\nusing BPF_JMP_IMM. BPF immediates are sign-extended to 64 bits, so a\nmax_entries value of 0x80000000 or higher b…","indicators":{"cves":["CVE-2026-98631"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.180Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/11d9be35c1f4233798e99be98bc474f83a254c6c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/123f90f394ca404ab8796a7c8072ff7fa5b65a9c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/227ec890559e922e235eb543646e3bf0bd8269b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/36461e58f88a1b723f86693f437ac12e60ff4363","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3c1e0a4bc156b8d5c5772dbc76b9ea74dce5ca24","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/70504de0bb627848667207bec7ccfd647deb8814","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b5c0cff0c5331582ab01c4c423731453a8381acc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c6d5c582d55a8f229d75e98d62eaa065b0deb18d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98632","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98632 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: Dequeue pending…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel\n\nIn send_cancel(), pending mesh_tx objects are removed from the\nhdev->mesh_pending list and freed via mesh_send_complete().  However, if\na mesh transmission was alre…","indicators":{"cves":["CVE-2026-98632"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.297Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/03ced4687fb79286be7fdee0fc58d2c74de3e7bb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/084be90948632a5a358821e687b11a14445aae76","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2189a219397d8e73808a67c4aade837b635705da","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/718a8ffa180d469f99ad4f746f00cafd39456415","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/71af682ba4692c2ed9ace4c3d4ca462ae368c029","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f84e52829021d00bca8e067302f597c71af1f71a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98633","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98633 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix skb le…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()\n\nWhen CONFIG_DEV_COREDUMP=n, hci_devcd_append() returns -EOPNOTSUPP\nwithout freeing its skb argument. This leaks the cloned skb and also\nprevents nxp_set_ind_reset() from…","indicators":{"cves":["CVE-2026-98633"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.410Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/8a36598050cd1e5abb1d5ed42cc224cfcb538c4f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/edcb84ee607a9ddfc6f2771a7f399115f0b0f19d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f2bbb36426581045a8bf7793da5419b9375e4348","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98634","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98634 — In the Linux kernel, the following vulnerability has been resolved: scsi: sd_zbc: Reject disks with…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sd_zbc: Reject disks with too many zones\n\nsd_zbc_read_zones() computes the number of zones with 64-bit arithmetic and\nstores the result in the unsigned int nr_zones field of struct\nzoned_disk_info, silently truncating counts…","indicators":{"cves":["CVE-2026-98634"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.507Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0af16d8be3ec7ff28bb56a0da79c9aed66ac2c3b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3ddf8383b54456f19fd73d3cebed81bd250c7388","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b6ec0f79745967c751c85df373062c8d15e45fc4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d8791ae55d85dfaeafa20ea48365482a0cc5a107","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98635","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98635 — In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zones_cond out-…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: block: Fix zones_cond out-of-bounds write on zone report\n\nblk_revalidate_disk_zones() sizes the zones_cond array from the disk\ncapacity and zone size, but the index used by blk_revalidate_zone_cond()\ncomes from the device-dri…","indicators":{"cves":["CVE-2026-98635"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.607Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/7c431d61b69a3fd0784c20aa4cd0b8fb501b5653","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ca688bb207957cffa5a8cad207329b0dcac1f2c0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98636","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98636 — In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size ra…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsquashfs: Add dictionary size range check to prevent shift-out-of-bounds\n\nWhen an abnormal SquashFS image (COMP_OPTS flag is 1 but dictionary size\nis 0) is mounted, and performs shift operations using dictionarysize, the\nshift expo…","indicators":{"cves":["CVE-2026-98636"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.700Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0cb85377daaefb4ce5ce72975f2deb27ee0e0cad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1f7745fb3580152ca902ef181b605f33cabfb1d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7a1c293e7aa17f1afaee0684e0e931fe23a5a6b1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88c673a0bd233df44ca0020da82f4fd3876de27a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d9c5c218ea356a1d88765214ad2919605280ab1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b02948a23455f8190a53887b2d2c13ae1d360cea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c68e0068a236f9a7dfc19720bdf11e5d80a85089","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e1ca4e3a380ef3e8f46ce006f1146392e3f32c98","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98637","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98637 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not clear VM-wide…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure\n\npkvm_vcpu_init_sve() clears KVM_ARM_VCPU_SVE in kvm->arch.vcpu_features\nwhen it fails, but vcpu_has_sve() tests KVM_ARCH_FLAG_GUEST_HAS_SVE,\nwhich is left set. Late…","indicators":{"cves":["CVE-2026-98637"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.820Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/a1b3c788ad31837e348075e93dbba3f447492776","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bd46b41f412fb81c50bac1a0929ec31320f3a807","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f0cd8ffae092cc1b9d7cfa9188ed5a88a374adcb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98638","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98638 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Validate the SVE vec…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()\n\npkvm_vcpu_init_sve() clamps only the upper bound of the host-provided\nsve_max_vl, so an invalid vector length reaches sve_state_size_from_vl()\nand the WARN_ON() th…","indicators":{"cves":["CVE-2026-98638"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:16.920Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2a2eb10795a1e495aebc7f829ccecb72c05b4fd9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bae3e4493046de4fefa15f809d9b8dc114e84a3d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/faf66e55e87498ab4bf88cdf9a629e61b3f2d3bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98639","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98639 — In the Linux kernel, the following vulnerability has been resolved: KVM: riscv: Fix NACL hfence entr…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: riscv: Fix NACL hfence entry update order\n\nThe SBI v3.0 specification (section 15.1.2) requires a nested HFENCE\nentry to be populated as follows:\n1) find an unused entry with Config.Pending == 0\n2) update the Page_Number and P…","indicators":{"cves":["CVE-2026-98639"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.020Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/6da466502621381fa88a6684290923d25c559266","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b3d346838ec65fac7fd83f5dbcedd13cadfffddb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d6de766d8d26d71b714f548192099112def50a9c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98640","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98640 — In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Validate PCI BAR s…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: amd_sfh: Validate PCI BAR size before mapping\n\nThe amd_sfh driver maps PCI BAR 2 using pcim_iomap_regions() and\nsubsequently accesses MMIO registers at offsets up to 0x10958 (e.g.,\nAMD_P2C_MSG3 at 0x1068C). However, the driver…","indicators":{"cves":["CVE-2026-98640"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.123Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/5f9e2ecb725adced013fbf5f94b9f185fad2e7d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5ff24aa7af0bca0780fe4e6effce902065f2c0a7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/65bcc5f89704efe5b9d69d4ea2c1002d90c31382","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7b3747d77767f066ccf4a9e8e3a8381643ab5368","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/92bf2883da0306ab9d1eb794acd1058fc5088ebc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dc687489131559ee52f447592f6d039a5a013061","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ee25833f037fa22d23ffdbfeebabe3579e8a0346","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98641","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98641 — In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame poi…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: set up the frame pointer for the exception callback\n\nA program acting as exception boundary saves all callee-saved registers,\nso build_prologue() takes the exception_cb path and never calls\npush_callee_regs(). That is t…","indicators":{"cves":["CVE-2026-98641"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.247Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/b67b4c763f211e7a6391c356fef552e2ea63f08a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d7cd5ebe13989f265015910faa25e5d50faa4c22","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ecdd770a9fc3eaf6c3127c5991312b84774a7b0f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ef1fb82f12186dd26153b14d9fbcf4ec98db81b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98642","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98642 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent c…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk\n\nSyzkaller repeatedly triggered UAF splats related to nodes in\nwaiting_for_gp_ttrace within the bpf memalloc:\n\nBUG: KASAN: slab-use-after-free in llist_del_fi…","indicators":{"cves":["CVE-2026-98642"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.367Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1c21452d02eec2f008e2c5535820f85adbd7587a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1d6581b544a88cf4348c2fb60dcb50ad63f012da","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a0e150a118025a05c8662c536ba2a865da86419c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f101602415fb39a58941bec444df65634d5a6844","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98643","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98643 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of r…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix out-of-bounds read of rtt_min in sock_ops\n\nA sockops prog reading skops->rtt_min never checks the sk type: on the\ntcp_conn_request() path sock_ops->sk is a request_sock (non-full), and the\nctx rewrite casts it to a tcp_soc…","indicators":{"cves":["CVE-2026-98643"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.490Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0c796efa919f52f788c22c79d1f1b70321696b3d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3a46f14e6cf375f3ca38f8f6e6524749e24ea0a8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6785313d4fac96afb21ef193610c1fa88b1a9e64","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/75f8cf22463d82bb1fb0239a3d485fc8f4c8ef03","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a8a9becbac93a9f54f4d565f1f3005eb08a7912f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cba54d142c43ec96d8c4d566f66439e8c0afded7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fc9d0e6e9d86fbefe7b8fe6ee49f4cf102add79d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd6bf2721933d8c90bc4ce57f3e204c9295e7e3f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98644","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98644 — In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid soft lockup in __htab…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()\n\n__htab_map_lookup_and_delete_batch() has no rescheduling point. The\nbatch count bounds how many entries are copied out, not how many\nbuckets are visited, so one BPF_MA…","indicators":{"cves":["CVE-2026-98644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.623Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/44f9bcb5ab2b268bc763ed3ebec83308b4972936","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4e48fe9b1c77966bede0a73feb3059d7595f642d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5c8b1869cb99a32a962388848cd19604fb41263e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/77a3b52b4455e6377e549539e757bc55eedefb51","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/85136bf22404474a815fc0ed26ec0d1cbc1bc3f9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ca5bd55fc508fbb5c08c62206d02237a5b6fc7e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f0c09de08ec077098b7e1563f2285f1c136cd816","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98646","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98646 — In the Linux kernel, the following vulnerability has been resolved: tcp: Skip cond_resched() in inet…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context\n\nbpf_sock_destroy() runs from the tcp iterator, under rcu_read_lock(). If\nthe sock is a listener that still has children in its accept queue,\ntcp_abort() ends up…","indicators":{"cves":["CVE-2026-98646"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.853Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/23da88d1597ee7fdda373e1530284b763710911f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/55bbebf2829c3f47c5a48fc261740301d0f25f48","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5b52417c6196e05618a3b5d9753dbed9adef0166","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eaab8cab451b9502ce224cd202550375b894a467","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ee7246bccb9da66076dd8094daa48bdc761d6b76","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98647","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98647 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btf_s…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix divide-by-zero in btf_struct_walk()\n\nWhen an access goes past the struct and the last member is a flexible\narray, btf_struct_walk() folds the offset back into a single element with\n(off - moff) % t->size, but never checks…","indicators":{"cves":["CVE-2026-98647"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:17.980Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/172756f02663ad45c889c001c1a8cb4082a01a05","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1ea3820937f8022e044c41c6e95c84b02741b45f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/63af086cb5fa6f72fd924f86bea4c2194da663a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8eb4cd72daad3a9ee63d2281bbdd16ce6d9406b1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/934e9ba9f8d05656a48624710be67ca4dc8482e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0b3dc66529676228cb938cbcad66920f735c223","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b8fa56722e9c43bcd59c51fe4c7edd5f4158a11b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98648","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98648 — In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/uv: Prevent potential out-of-bounds read\n\nWhen the system has more than 85 secrets, the uv_secret_list struct\narray only holds up to 85 items per page, resulting in an out of bounds\nread in find_secret_in_page if the targeted…","indicators":{"cves":["CVE-2026-98648"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.097Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/04bb5b2eb9f1d56110f14d3a4e31fa2c65fb026f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/116bba758533a139bbede8d717a1371bd6d890f6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f47190b08b71e8482072978373ee88cb2dfbdaf4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98649","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98649 — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in _destroy_…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Fix race in _destroy_pages_crste()\n\nUse READ_ONCE() in _destroy_pages_crste() to read the crste, avoid\ndereferencing the pointer multiple times.","indicators":{"cves":["CVE-2026-98649"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.193Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/4ca00a9154f998116fba9a32cce5bd938d228065","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/90bd832b2bc367991d424d847003ce345b454ffc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98650","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98650 — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix potential races i…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Fix potential races in dat skey functions\n\nWhen dat_cond_set_storage_key() finds a large page, it will\nconditionally set the storage key in absolute memory using\nlarge_crste_to_phys() to get the absolute address.\n\nThere…","indicators":{"cves":["CVE-2026-98650"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.290Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/27554b9505ddfc0aeab466aeb60929dfa17284c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c958f0498891203fddf2764b28f8b102c6bfd719","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98651","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98651 — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()\n\nSome callers pass NULL as oldkey. Calling page_cond_set_storage_key()\nwill cause that NULL pointer to get dereferenced.\n\nFix by checking for NULL and assigning…","indicators":{"cves":["CVE-2026-98651"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.387Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/75867536746ab2d034488a6a93ee6cde83553342","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88e22ffd1e46b95e40a6afabe486deb1d31a3ae1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98652","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98652 — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in k…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Add missing srcu in kvm_s390_set_irq_state()\n\nLike kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() also needs the\nkvm->srcu or the slots lock when performing the Store status operation.\n\nFix by taking kvm->srcu in kvm_s…","indicators":{"cves":["CVE-2026-98652"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.483Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/7a33007b95c8908ae3980eb2b4c508f8936766df","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f3a557067d57ce6ae98d485c8009b223e16f5f36","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98653","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98653 — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix _gaccess_shadow_f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: Fix _gaccess_shadow_fault()\n\nIn some circumstances, it is possible that the page of nested guest\nmemory that is being shadowed is not present at all in the parent guest\ngmap. dat_entry_walk() will not find any leaf entry…","indicators":{"cves":["CVE-2026-98653"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.580Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/94c43c7df46433ed4d1e18f13770b019ba977bd8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/faff4c8ff3dbec6d71b89dd281a0d17c4478fa44","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98655","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98655 — In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Require kernel access for text poke events\n\nPerf events with exclude_kernel=1 can be opened without kernel perf\naccess. However, exclude_kernel does not suppress text-poke sideband\nrecords. Every PERF_RECORD_TEXT_POKE is mark…","indicators":{"cves":["CVE-2026-98655"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.797Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/357e8a77a501d96c9517f01f4a211eed5e9c9184","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/677d0b51ac1a0db55d768c4c6399210b3de0795b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8473f44db9f710ea6f8cafb22f2e3ba6cb8ca9a7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e506333d1b9f42f1e402acebf1283af3c44a3809","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98656","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98656 — In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_wo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: trigger: cancel reenable_work before freeing trigger\n\niio_trigger_notify_done_atomic() defers ->reenable() into\ntrig->reenable_work on the system workqueue, and the worker dereferences\nthe owning trigger through container_of()…","indicators":{"cves":["CVE-2026-98656"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:18.907Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2a57b9246cecd5dd797a42eb310d6c8816f26d9e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/882d0011c59ff8ac15188ec9ce071399ecfa10ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cf513df1a2c75566cdc802d9da47f62e8d6cfd18","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e64703280ce7a23a43c27efebeb7da457c88bf5c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98657","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98657 — In the Linux kernel, the following vulnerability has been resolved: iio: proximity: pulsedlight: fix…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: proximity: pulsedlight: fix iio_device left registered on PM setup failure\n\npm_runtime_set_active() failing in probe() jumps to error_unreg_buffer,\nwhich only calls iio_triggered_buffer_cleanup() -- it does not undo the\niio_de…","indicators":{"cves":["CVE-2026-98657"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.013Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/06fa13c53442257b94ea1519555ceddaaea57e0d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/20ebd7f4e35c0a737f011bc83aeb0cdd37507648","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4daa9ca557b4b98ae1ad38a6d1deaa3e31eb8edf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e462b47b9637b8c0285f4a38b5af9a322847d164","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98658","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98658 — In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: proximity: aw96103: validate firmware data length\n\nThe firmware parser reads a length from the binary header and then uses\nit to walk six-byte register/value entries. A truncated firmware image\ncan make the parser read beyond…","indicators":{"cves":["CVE-2026-98658"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.110Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1a7c522a35477d70320bd64aba8e9de0c1058c6f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4a9b9f2d4e26589afd0ac099c8e5593170dd5ac7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6501b032be217ecf47e793b78a05078cf0b604ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/815ae0b73b69ace207b6bbf7ef428b06491c3ddb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98659","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98659 — In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Retu…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: rohm-bm1390: Return error when read fails\n\nThe data reading function ignores the cached error value, and\nunconditionally returns 0. Return cached 'ret' -value after stopping\nthe measurement so user knows if read fail…","indicators":{"cves":["CVE-2026-98659"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.213Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/493e743ea1b5930bfa0c6c25b46add6c5d5323db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6280d15f08603230855cf667d1cf67e7e94f693c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0e951ffc5a28141a106562997ca136ec6a0e1a3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98660","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98660 — In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup\n\nThe sampling frequency tables store each frequency as an integer part and\na fractional part in micro units. num_sampling_freq_avail is initialized\nto the…","indicators":{"cves":["CVE-2026-98660"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.313Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/4fd5a61e61d6899cbd45728a5fceba49a53c222d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/56c423b233b214182c58c99861899327b45b0d6c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9db6684fab228edd3b8861a172ccbce3236f027a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98661","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98661 — In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix in…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: rohm-bu27034: Fix infinite delay on error\n\nWhen reading an integration-time fails, the code will use error code to\ncompute the sleep time.\n\nFix this by using the smallest integration time as a default if\nreading fails.","indicators":{"cves":["CVE-2026-98661"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.410Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/050482f958521d80603e88d5c3a59872528ec13c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/10a958e76c737c19576e1097c49f210eb99b94bf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6a27402a8ff1f63464557c5274a4115b60ea1f2f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8065a6c02f629187131f3136bedb26f9080e3cca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98662","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98662 — In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: gp2ap020a00f: drain irq_work after free_irq\n\nThe threaded IRQ handler queues data->work through irq_work_queue() so\nthe trigger is polled from a per-CPU context.  free_irq() does not flush\nan irq_work the handler alread…","indicators":{"cves":["CVE-2026-98662"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.507Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/63213927b141085b6c8719b8037dab3074b7e0fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a1769877ff52a4f1bfb9ca535d1b5113808bd602","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a36814b9fe00970116d30c3143d81e7425c4d334","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc71400bc965c0d3894a38ead3d71243400c2d5e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98663","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98663 — In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprote…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: adis16480: fix unprotected debugfs reads\n\nThe firmware_revision and firmware_date file operations are open coded\nand never call debugfs_file_get(), which debugfs_create_file_unsafe()\nrequires. debugfs_remove_recursive() t…","indicators":{"cves":["CVE-2026-98663"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.603Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/396b83106f5e7d16467049f0caabd10533c01a0e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b7e507c6da8875da93b4130c8185e82a9dfd565c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ce308ce18dedc18e9eeff8473892975e6fdd7aef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e1dea54496f90a62318cf4eeaa1e9ef8316e92b6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98664","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98664 — In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprote…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: adis16400: fix unprotected debugfs reads\n\nadis16400_serial_number_fops is open coded and never calls\ndebugfs_file_get(), so debugfs_remove_recursive() does not wait for a\nread in progress and unbind frees the iio_dev unde…","indicators":{"cves":["CVE-2026-98664"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.697Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/50e8d70ba0743f88afd7e49f9cebd1841ee677f5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d94787287a113a1326211647d5e0deed1e9de105","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e9b4c00f775a915b759b08bfe2c5e806a8301a59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f501302ebb9e1504162351b951fe3ae331c852ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98665","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98665 — In the Linux kernel, the following vulnerability has been resolved: iio: health: max30102: fix NULL…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: health: max30102: fix NULL dereference in interrupt handler\n\nThe interrupt is requested in max30102_probe() and stays enabled\nfor the lifetime of the device, but indio_dev->active_scan_mask is only\nvalid while a buffer is enab…","indicators":{"cves":["CVE-2026-98665"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.797Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/60699102827fdb51f9591414165359c8e867f302","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8d6f98972fe2bd6f73f39d982af0c85d766a1503","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eeb23ba97bd8016e815ef70300b8d34a0a316b90","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f0ea4824deebf21dacfbe397c4b0a5fd3e745a8d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98666","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98666 — In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprot…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: gyro: adis16136: fix unprotected debugfs reads\n\nThe serial_number file operations are open coded and never call\ndebugfs_file_get(), which debugfs_create_file_unsafe() requires.\ndebugfs_remove_recursive() therefore does not wai…","indicators":{"cves":["CVE-2026-98666"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.900Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2b498df75d6c29aa3e760127ae0f0003df598b53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b05e768420352d9051f86c1a1f20f44fa046ba45","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b53dc6e15aead039bc6a5e08060c96786240c81d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d5b0b62e26d7d30e0e16e2d695f2161f7e92a5a5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98667","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98667 — In the Linux kernel, the following vulnerability has been resolved: iio: frequency: adf4377: Fully i…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data\n\nThe clk_init_data structure contains several mutually-exclusive members\nfor different methods to specify the possible parents of a clock,\nprompting driver…","indicators":{"cves":["CVE-2026-98667"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:19.997Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/6564f394a4a95fad534643a6ca0f1d36ff081799","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e787fd23d5063c61582c3c27522240b6e6703fde","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98668","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98668 — In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffe…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: buffer: Ensure bounce buffer used for unaligned case is zeroed.\n\niio_push_to_buffers_with_ts_unaligned() leaks uninitialized heap memory\nto userspace if the data passed in is not a multiple of 8 bytes and the\ntimestamp is enab…","indicators":{"cves":["CVE-2026-98668"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.097Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/3a87212b1a09a1fdd730ce5520f7b1fc0b488511","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5330036bc68d23672bfcc16c60c54701ae123083","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b134ef820610bd873c9d59999d9824710964ce82","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b5c2f21f645e40c70fda2a4283e6f2a81e5cb9f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98669","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98669 — In the Linux kernel, the following vulnerability has been resolved: iio: buffer: serialize buffer te…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: buffer: serialize buffer teardown with mode claims\n\nBuffer-mode claims hold mlock to guarantee that the device remains in\nbuffer mode until the claim is released. Normal buffer updates take\ninfo_exist_lock followed by mlock in…","indicators":{"cves":["CVE-2026-98669"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.190Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/84bb0fc46ccf6a545b8fdf57cda83770186ed8dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/89f3852a28fcf7bab599280cb082baa0675536db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b466db9e68b4741af85f6c017e2bb0a2f025053f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e63188d77e10c0951bf67da6c295f768fd1abf4b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98670","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98670 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind\n\nThe ZYNQ XADC alarm IRQ handler queues zynq_unmask_work via\nschedule_delayed_work(); that work is cleared by a devm callback.\nRegister the devm callback…","indicators":{"cves":["CVE-2026-98670"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.300Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/0f3f427076240e75ff265e61645627a71ca4918c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/49ea8a359e362bfbb32a647c8eb7962fbb37234e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a29d385ad7b340c952a3935af2b33488db1eb3a6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a5fe2d1b55faba6d00fd87ad491b6cb603046304","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98671","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98671 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure\n\nIf devm_thermal_of_zone_register() fails, probe returns without\nunregistering the IIO map array or disabling runtime PM.\n\nJump to err_map to release them.","indicators":{"cves":["CVE-2026-98671"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.407Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1bad19e598cd77884d812fd2f88b05c635b5e7ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2cdc7ef31827db4fbc6283750420639569e1f0e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d74c2489acc5f0a281e7ad00b94912235729a911","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/feae7e0f40d607dda57d476da65beaae76a45142","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98672","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98672 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possibl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: stm32-adc: fix possible division by zero in processed channel\n\nIn case the conversion has failed or returned zero, processing *val\ncan lead to a division by zero. Need to check for errors, or converted\nvalue is zero, befo…","indicators":{"cves":["CVE-2026-98672"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.543Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/30d27899cbba5b080954b5d3741bd535806c3101","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6dd3bf785d0307d1cf8f4a97c2240b0af14bef50","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ab4e57adead252dd7f947baed6178f32ede88d38","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c5de6a6f855fdcf1e0ea549fb227a316db51c405","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98673","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98673 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI la…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: pac1934: check ACPI label duplication\n\nA label duplication failure currently reaches the terminating-byte\nwrite. Release the ACPI result and abort before accessing the missing\nlabel; earlier labels are managed by devres.…","indicators":{"cves":["CVE-2026-98673"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.650Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2eb7f097e15dc8935b49402456d01f3ab68f3ddd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/64c82e7bd9c82b0c9276297df34a3579e8658f55","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7996557c6b7d3b136668060057a790e058161dfe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b7ac07d0b1a44bf644733298e80fd1f22e2f0cc1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98674","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98674 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initializ…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: adi-axi-adc: Initialize state mutex\n\nThe AXI ADC register access paths serialize transactions with st->lock,\nbut probe does not initialize it. Initialize the mutex before registering\nthe backend.","indicators":{"cves":["CVE-2026-98674"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.750Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/549b71ce050637dd32678371ad76c445a2f8c9aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b473ee29aa0d39e7a7568b9675b15db2b0ae6057","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dec6193cef07e5915da0d6dd17725292d469e4aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98675","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98675 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ade9000: handle Phase C dip events in IRQ1 handler\n\nADE9000_ST1_CROSSING_DEPTH is the exclusive upper bound for scanning the\nSTATUS1 event bits, so a value of 25 left out the highest event bit,\nADE9000_ST1_DIPC_BIT (bit 2…","indicators":{"cves":["CVE-2026-98675"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.853Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/d338af069f08658f53231adb445ddb10048730ac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f73b94acc7ec81f9c49feb87f649ba5a80a0905c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fafefa925ed7ec10383d9bf0378abf878b7f13cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98676","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98676 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL poin…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ade9000: fix NULL pointer dereference in clkout registration\n\nade9000_setup_clkout() passes NULL as the register address when\nregistering a divider clock. During clock registration, the common\nclock framework calls clk_di…","indicators":{"cves":["CVE-2026-98676"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:20.950Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/134aa31a8d4e71f6ab1d155ad7b4502508832f72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2400175228fbc10b29c49a7b5f70a7e80d144dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98677","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98677 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix us…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad_sigma_delta: fix use-after-free on unbind\n\nad_sd_buffer_postenable() allocates sigma_delta->samples_buf with\ndevm_krealloc() at runtime, so its devres entry sits after all\nprobe-time entries of the driver. devm resourc…","indicators":{"cves":["CVE-2026-98677"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.057Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/5663c72bf400231e90777982216797191887a6b9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/84500ae0d976995a6870cb1dca2d124b6b2d6e5a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9ee8306121495d2a25aa5d1bfd519f2748786b83","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f20b94a7dc1ff9ade191ce839c984210fdbdc653","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98678","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98678 — In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid ov…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad4030: fix invalid oversampling_ratio validation\n\nIn ad4030_set_avg_frame_len(), the logarithm is calculated before input\nvalidation. Passing zero or negative values leads to an undefined result\nfrom ilog2().\n\nValidate t…","indicators":{"cves":["CVE-2026-98678"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.160Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/6b0cc4e32599f59c994a60743f53fc72cb2979f4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d615210564205993e8f0e7ccb57cc2e66b7d5706","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98679","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98679 — In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject d…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kxcjk-1013: reject duplicate event disable\n\nThe IIO core does not filter duplicate writes to the event enable\nattribute. kxcjk1013_write_event_config() already ignores repeated\nenable requests, but a repeated disable re…","indicators":{"cves":["CVE-2026-98679"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.253Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/3365209e758c845a197211645731f0e393a86012","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aa94a37b5a3e560c277dac6f9e5d0d75549a6583","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ad690c0c1b9131725619e352cb7c970488cbf436","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd30c10ff60d2b30386c23bb7c61cc97f2385c97","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98680","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98680 — In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Preve…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Prevent memory leak and fix state\n\nThe driver allocates memory for samples at buffer enable path. If regmap\noperation fails in the kx022a_fifo_enable() at the buffer enable path, the\nallocated memory is n…","indicators":{"cves":["CVE-2026-98680"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.357Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2ef953f7b54e1460718116b4c0a4c63b106348fc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5c7ca8fe72064c1c3c7a7418031f692bb2bff260","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e3bc345d08639e62b629e0ec0799f7fb45e21372","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e65e128b51a37dd1a9056ac3d1705d805a5c8bb0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98681","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98681 — In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races\n\nThe invalidHandle, swapfile, oplock_break_cancelled, offload,\nand status_file_deleted fields are stored in the same bitfield byte\nin struct cifsFileInfo, but…","indicators":{"cves":["CVE-2026-98681"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.457Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/19465a9aeb664f1d710d0d22c07c31bfb7c85446","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3786ee67658a2c80fef2544e7de2cd329e043cf9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4165641d06ef44f3a31b77a28048b6c737e885e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d9d23d115610e0342e768f6cb525d91c7b154027","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98682","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98682 — In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: drain and invalidate before server-side copy/clone\n\ncifs_file_copychunk_range() and the clone (FICLONE) path of\ncifs_remap_file_range() do not serialise the destination page cache\nagainst the server-side copy the way t…","indicators":{"cves":["CVE-2026-98682"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.557Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/c9b1194e8ec99d95db25db45edd2fbf690f043ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dc71660f11ef2fecc0695a41e49cd496a9d255ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98683","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98683 — In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data be…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: flush dirty data before zeroing a range\n\nsmb3_zero_range() emulates FALLOC_FL_ZERO_RANGE by invalidating the\npage cache over the target range with truncate_pagecache_range() and\nthen issuing FSCTL_SET_ZERO_DATA to the…","indicators":{"cves":["CVE-2026-98683"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.660Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/8f8d32c1044f70e46e87550e039a15ff20a4b21c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cecf4114069fc19629d284710fd783d56bbca862","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e8ba21c7e6ef3d4cb617858760673877b2e4a2bb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98684","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98684 — In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit da…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: flush and commit data before querying allocated ranges\n\nThe mode 0 / FALLOC_FL_KEEP_SIZE fallocate emulation for small interior\nranges in smb3_simple_fallocate_range() issues\nFSCTL_QUERY_ALLOCATED_RANGES and zero-fills…","indicators":{"cves":["CVE-2026-98684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.770Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/aa994489bd835547c191827acc460192e147032d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bf84e44ff0ed802778eafd7ecb623635379cb506","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f82242fe3109a3ef72f429540b5bdde08fbfb0e4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98685","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98685 — In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pa…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: discard post-EOF pagecache when extending a file via clone range\n\ncifs_remap_file_range() discarded the pagecache only for the folios\noverlapping the destination region, so when a clone extends the file the\nfolio strad…","indicators":{"cves":["CVE-2026-98685","CVE-2026-98686"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:21.890Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/15bb9f1d3e967e328649e92a1451e60a0dc66118","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4721587f96cb8de8164f3fd203093a0875560999","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6a8279c98ad289b27c0bdb11adb3f0c0b7fd456d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/94949b6b2f2bf0dba2e8786aed0b08cc6bc3a183","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b75dadb50a25eed525264bf6fea44fad94e7626f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/da4fe97fb6c730d9c94a115c7bfa6f98e0d578d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98687","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98687 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject oversized XD…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Reject oversized XDomain properties responses\n\ntb_xdp_properties_request() allocates room for 45 data dwords in its\n252-byte response buffer.  The XDomain length field is six bits wide,\nhowever, and a malicious peer ca…","indicators":{"cves":["CVE-2026-98687"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.097Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2f97f929dad9eb3e1f63b721d2dd49bf9bc68efa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/737a1d2e9642d5f718bd29aa4a98b9eef3832f0a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/80756e263846ab694984e749e8c626897331438f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a766a86ff48acee76aeb8e2575771040749e509d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98688","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98688 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix NULL dereferenc…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Fix NULL dereference in tb_remove_work()\n\nThere is a slight race between tb_remove_work() and tb_domain_remove()\nwhich leads to dereferencing a NULL tb->root_switch pointer inside\ntb_free_unplugged_xdomains():…","indicators":{"cves":["CVE-2026-98688"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.207Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2f4cd43faa9d6470b30a9fbcbac6584db8108c1f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4310c6b8e75d6a47f7548e5948fbe6318aa4440a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98689","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98689 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Don't access a DP t…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Don't access a DP tunnel after its DPRX read was canceled\n\ntb_dp_dprx_work() checks ->dprx_canceled before it takes tb->lock so it\nmisses a tb_dp_dprx_stop() that could not cancel the already running\nwork. It then poll…","indicators":{"cves":["CVE-2026-98689"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.317Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/2c2fd6a7fd5e1218db7e17336fc1a0393b6949e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/405a969c0b3356639116db89ab367be1d64b77c0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/419fa32fa5bc2d7fb9d0d15d5630b1c1090808b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98690","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98690 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain referenc…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Fix domain reference leak when DPRX read is canceled\n\ntb_tunnel_one_dp() takes a domain reference which is only dropped once\ntb_dp_tunnel_active() has run on the work queue. If that work is\ncancelled that reference is…","indicators":{"cves":["CVE-2026-98690"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.423Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/1fd1f67c94d30889377bba774f032ec15e8b9299","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2f5893172fc6153f5f1ef34014ddbfcbf1f47f29","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7739b02129b2248f9a8054cfda924fa253f66a88","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98692","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98692 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Make the DP tunnel…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Make the DP tunnel activation callback mandatory\n\ntb_tunnel_alloc_dp() takes an optional callback which is run from\ndprx_work once the DPRX capabilities read has completed. Without that\ncallback tb_dp_dprx_start() read…","indicators":{"cves":["CVE-2026-98692"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.623Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/12f5d8b85a66a0ac08d082517d92ce136f8c0d42","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/47d60ea801fc333a10c576691eca2e7840b02d3d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98693","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98693 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Hold a router refer…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Hold a router reference for each allocated HopID\n\ntb_stop() drops the reference to all DP tunnels but does not deactivate\nthem, thus nothing cancels a dprx_work still in flight (which holds its\nown tunnel reference) an…","indicators":{"cves":["CVE-2026-98693"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.727Z","fetchedAt":"2026-10-20T03:01:48.460Z","references":[{"url":"https://git.kernel.org/stable/c/032c59c7681c661b63123231824170c025afb7e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2b5f976119d8f099a03cbf700df3d9c8690fe33d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c444d2c17dc236680324fd989232199680a6c419","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98694","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98694 — In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Fix KASAN reported use-after-free when request is canceled\n\nAlan reported that when doing stress testing sometimes KASAN notices\nuse-after-free during control channel operation (stripped down keeping\nthe relevant parts…","indicators":{"cves":["CVE-2026-98694"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.830Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/08287212b622039212c972806f896f078dfd28e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/71b3c517e02af2c46ad58d4b3706b7c3cb24936d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a02188ddc24b7872f0c5e0c5873f827318717803","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f18faa3d3b810d60a3005ae1b1d1866faa67d343","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98695","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98695 — In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup ra…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: fix ioctl hangup race\n\nThe tty ioctls can race with hangup and end up calling into a tty driver\nfor a device that is already gone or powered down.\n\nSerialise the callbacks using the tty port mutex and add the missing\nc…","indicators":{"cves":["CVE-2026-98695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:22.960Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/4597ddd6168ae2a4123404e5f0871f1070dc7773","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7912a95d1345c77d8d63b530b00c118700b78abd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ae0da9a5c1ca95c20cc5feffd511ce6eae75924e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ae0e61d95677efa778379853e495d748e6efbf95","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98696","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98696 — In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix driver deregist…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: fix driver deregistration order\n\nUSB serial driver modules register one driver for the USB bus and one or\nmore drivers for the ports on the USB serial bus.\n\nWhen unloading a driver module, the USB driver must be deregi…","indicators":{"cves":["CVE-2026-98696"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.070Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/428d479a0d31460fbf5969ab262ccd673f1fac01","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/646e5b28b4fdbc1b828a2398d6ced2c1dd308a46","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9b085a06a0a411b0bcdf18b61c3ebf1be1c72ffe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a1aa474768f69ea3a70da523f00f74c264cfa10e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98697","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98697 — In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix dynamic id driv…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: fix dynamic id driver deregistration race\n\nOnly free the dynamic ids after having deregistered the driver and\nremoved the \"new_id\" attribute to avoid leaking any id added by a racing\nwrite to the attribute.","indicators":{"cves":["CVE-2026-98697"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.177Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/380f57cd58e26e0f3687451196ec446c473c52d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/63594e8ffe097bc0b7639936f33799a7653dded2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ebd8fcaaacb66c15ae7e19d14619abe3762e0701","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98698","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98698 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FIL…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: handle empty FILS association request payload\n\nfils_encrypt_assoc_req() accepts a (Re)Association Request frame whose\nlast element is the FILS Session element.  crypt_len is then zero and\naes_siv_encrypt() is called…","indicators":{"cves":["CVE-2026-98698"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.280Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/20f939b0c151d1d28e6b62a76b2454fa6fe877f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2f5b62f6534d336a62fdb9e88b186dd70b4323ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/452f1c9b76f7a122bbc4630b9691bda4809677c4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5bfd4b0b40b79781d900cb2f7da0685070f53c67","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98699","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98699 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mesh fast xm…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mesh fast xmit path deletion UAF\n\nmesh_fast_tx_cache() stores raw mesh_path pointers. Path deletion\nflushes the cache and then frees the path with kfree_rcu(), but a\nlookup that already holds the path can insert…","indicators":{"cves":["CVE-2026-98699"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.390Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/0117f1aa189495e6f1ff608681678817995aee39","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/128e800a41270ab197b1cc8043637a2924865608","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/93da3ec938bfdcfb3899428f04c6d0c56fe32952","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ee3aadc43ea69d98f666431e787137ac0badbb85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98700","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98700 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set info->band f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: set info->band for 802.3 encap offload frames\n\nUnlike the 802.11 TX paths, ieee80211_8023_xmit() does not set\ninfo->band from the channel context on non-MLD interfaces. It stays at\n0, so ieee80211_get_tx_rates() use…","indicators":{"cves":["CVE-2026-98700"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.497Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/2d9c5525bbc1a548cdc9c4def3cd7fbfc7c66b5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4febc02cd02f021f2b6d0768332be643ef14a12d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/93c1b247224a32f546b616a8fe87b9bab20f0a7f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9cedbfde1450028f530e9af950f53491fcaebfeb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98701","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98701 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh pat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: release mesh path quota on failed additions\n\nRepeated failed or duplicate mesh path additions can exhaust\nMESH_MAX_MPATHS while the path table holds fewer paths, which stops new\npaths to reachable destinations from…","indicators":{"cves":["CVE-2026-98701"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.597Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/56691ed9ef792f180e008a43294a4dc059fbeca2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7325a44474f20c1393a1c114c6811abce6ddfaf4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a59eca4557c7462aad1b160011013290a92de97d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a613c891906b558c10a4fa98ca29747b98e857cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98702","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98702 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 3…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: reject invalid 320 MHz CSA bandwidth\n\nThe HT/VHT channel definition validator can receive a 320 MHz\nbandwidth indication from a received CSA frame on a non-6 GHz link.\nIt warns for this unsupported width but continu…","indicators":{"cves":["CVE-2026-98702"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.700Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1892e71aa2e5ee667d87c6e49e3661f5e290303b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/56e236759f0a8dc910c2ae7cd3c161f298ee5794","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/79b3ce0d881cd6e5d4d3496b19f5cc5e7089a56c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cf0ddacce173890407ed3fa50c8ea9b3c0cc0e16","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98703","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98703 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: minstrel_ht: val…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: minstrel_ht: validate fixed rate index\n\nThe fixed_rate_idx debugfs file is a plain u32 attribute, so any value\ncan be written to it.  minstrel_ht_update_stats() then copies the value\ninto mi->max_tp_rate[] and mi->m…","indicators":{"cves":["CVE-2026-98703"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.810Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/15fb9e3cea55fbc378261ce35a32b0f8828f0000","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/42aa9feb27b600809414a3c6b0c650bafba542a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/43082d604a9937b94ceb2e484403956d0f363324","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f8ab6ae1fa360b0191252677f41e781dcb0ffe6e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98704","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98704 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback as…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: keep fallback association elements alive\n\nAssociating to a non-transmitted MBSSID profile reads freed memory while\ndetermining the operating channel and applying HT capabilities.\n\nWhen an association response omits…","indicators":{"cves":["CVE-2026-98704"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:23.913Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/0878594c5806dd29fa5e16cc026ce19158afdad2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1d9644753d46c86b4e5c05bd6d9d35339ea27331","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a10a2f80476d166fd81c361ec0319493671b694e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d0183cd1f6a2dba9e63be20af2f65093c9c8d121","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98705","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98705 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: account proxy pa…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: account proxy paths against the mesh path limit\n\nProxy-path churn can drive the interface path counter negative and let\nlater mesh path additions exceed MESH_MAX_MPATHS.\n\nmesh_path_free_rcu() decrements the interfac…","indicators":{"cves":["CVE-2026-98705"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.017Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/3b75831ceee76d32bb8e7ddd241904f92f9b5407","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5a32409ed34a1868830899a5d2437f0b3bf3532c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a5f35d4b112af1415ff06bd501c8cc26cc08aa8b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/df072db65fdaa34ad15e1d66fc06a53e3e97f778","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98706","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98706 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drain PS deliver…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: drain PS delivery work during station teardown\n\nRemoving an AP or mesh station can notify the driver and wake TXQs after\nthe station has already been removed from the driver, and can update\nnum_sta_ps and the power-…","indicators":{"cves":["CVE-2026-98706"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.117Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/097460fcdd8ab9ef6f6018b2fdc29ba0ea499298","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/67a9e80c3ca20c9044cd6ee72cd6278dd19b5023","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/772bd89304ecf057cc51ce4ce24a1a96ac9c8de3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/843d3a1e6f25027ac85f88f67b95d82c67306dee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98707","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98707 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: shut down RX BA…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: shut down RX BA session timer on teardown\n\nTearing down an RX BA session can leave the session timer queued on a\nfreed tid_rx. Later timer-wheel processing and the timer callback itself\nthen run against freed memory…","indicators":{"cves":["CVE-2026-98707"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.230Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/09b7d5e4f88504e62ddf4ff31ebeebb3b87578ba","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/481f9230284c27052b59c587069f232c5d84779e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7bb2a5bd4f07192fca35644fab7d49a17bfbc861","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e588e83e5c7a0f6d7a77dbbb58927c8c8cfd598e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98708","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98708 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep paired old…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: keep paired old chanctx alive\n\nAn in-place replacement keeps reciprocal replace_ctx pointers between\nthe old WILL_BE_REPLACED chanctx and the new REPLACES_OTHER chanctx.\nHowever, the early free paths only consider a…","indicators":{"cves":["CVE-2026-98708"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.337Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1c82d0c5d509179ba2a4edfa096f516aebf960b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/21a688cbeae0e682f03e91f1e7a7eedd60d9d4f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3412e9a800786d1dec4a58367db1cba275e7ef11","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/afd1cdd16a25c7185b812a612ab7d5f2cbd1e086","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98709","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98709 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: count only match…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: count only matching reservations in reserved switch\n\nieee80211_vif_use_reserved_switch() validates a replacement by counting\nassigned links on ctx->replace_ctx and treating reservations too\nbroadly. A link can still…","indicators":{"cves":["CVE-2026-98709"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.437Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/03525b632908b049f4d04cc8a71cdff2329589cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/437f3727b4fd715266c296435c116288f82666fd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5cc54a000960bc88f8c58940164dca0e601ab39c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d31f655e44631891788ca67018ec5e1ed1c7de86","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98710","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98710 — In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945: free EEPRO…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlegacy: 3945: free EEPROM data on remove\n\nil3945_pci_probe() calls il_eeprom_init(), which allocates memory for\nthe EEPROM data. The probe failure paths release this allocation with\nil_eeprom_free(), but the remove path doe…","indicators":{"cves":["CVE-2026-98710"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.540Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/89f9d6186dc7429f38132635526e28549c913c0b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ab7bee2cd55f665cb29fa0ace2ec14020e0a452e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cd8f8f45d81aac384311701d7ffe26567af2e783","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f8ebe286394c0bbb4a6dbacb182a34ab6376922d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98711","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98711 — In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cw1200: fix TX padding OOB read leaking heap data to device\n\nThe TX path rounds the transfer size up to the bus alignment\n(align_size(), up to 511 bytes for SDIO, 1 byte for SPI) but sends\nthe padded length straight from the…","indicators":{"cves":["CVE-2026-98711"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.653Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/678c8f4ba285649d5418a858d5d4f30c728a54ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/71f693a0ecccf36532dd2790f7969da6c71d5d23","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7c1611780823b76219cb1478db53dfd890c4a9a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0e97bd40e0c2cb1a3530ef8f6250aacf3224515","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98712","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98712 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcoun…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq\n\nReferencing the last interrupt inserted in an LR is rather fragile, as\nthis interrupt can vanish if a concurrently unmapped LPI.\n\nSolve this by bumping up the ref…","indicators":{"cves":["CVE-2026-98712"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.760Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/19bc5d79ece613f242b5ec03921a3b465321bfed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8b25393d16a5ca8df907bd7ee1ff2e9d85678b3c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98713","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98713 — In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Apply the fine-grain…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT\n\nFGUs don't actually require hardware support, so don't gate fgt trap\nconfig insertion on FGT. This is the only action required to allow FGUs\nalways, as kvm_calculate_traps…","indicators":{"cves":["CVE-2026-98713"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.857Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1113374a17d7f7d16b02ee0bbd9b1e7a60cbb087","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2f4a15c52a552c5244ec27f4ca8bda855594f918","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4bdd2b3a708c1feb701cb8b62feb8ad2fd77bb07","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/af3300b3a6bace925a496f3520e171c07b999c72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98714","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98714 — In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update control fields…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded\n\nLeave control.erap_ctl and control.clean as-is in the VMCS if VMRUN fails,\nbecause as per AMD:\n\n  there's no explicit architectural guarantee about the beha…","indicators":{"cves":["CVE-2026-98714"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:24.953Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/8676b29d186fcb5c1251d8152fc91d19421e5600","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e27fc915c8f575ab5630e27d97465c2077d4b9d1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98715","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98715 — In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Preserve TLB control (…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN\n\nDon't reset the VMCB's TLB control back to \"do nothing\" on a failed VMRUN,\nas empirical testing shows that the CPU performs the requested TLB flush if\nand onl…","indicators":{"cves":["CVE-2026-98715"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.050Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/60d93c27859fb3ec5b5a689e24de303f166477d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd873c3d1b5240e80365f09e758e8c96b88a7cdb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98716","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98716 — In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use the active VMCB's…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted\n\nUse the MSR permission bitmap of the active VMCB instead of assuming that\nKVM is always using vmcb02's bitmap when L2 is active, as KVM uses msrpm02\nif…","indicators":{"cves":["CVE-2026-98716"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.150Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/318ef696fa3c712e46bb62a1a828c3cd62f390c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/55865b3ae03705aa39198783b9cb1f8b96eb44e4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/74836ae4785b9754bb36d0b18fcc1dec4e5e98d2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9e06bbb9ade7cdf28d4a3b5b14e5812881c8df85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98719","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98719 — In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Nullify \"have run CPUs…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Nullify \"have run CPUs\" mask pointer when freeing it\n\nNullify have_run_cpus when freeing the mask, particularly in the error path\nof __sev_guest_init(), so that KVM doesn't have to subtly use sev->active\nto track whether…","indicators":{"cves":["CVE-2026-98719"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.463Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/0fbc7fec2242de6c3dcea6de55573c428e820173","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8abbc76120a74bfba1851bd97528099d715e45c6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b1de3ebf59507e0edacaa5cfa2225bc1869e1b63","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98720","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98720 — In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Force MSR bitmap refr…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified\n\nForce a refresh of the vmcs02 MSR bitmap during nested VM-Enter if the\nruntime eVMCS controls (pin, primary, secondary, etc.) are being updated.\nIf L1 isn'…","indicators":{"cves":["CVE-2026-98720"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.583Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1e497e3bdab6983deb68a1d26b488027deb4527f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2abb25273c82061dd4670690c81c319c03740bf6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2db11598b59f16ddb6420693f9a4ac4efc3d4789","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f6189e26d0237e47e2f04f9cb1e43fd19a9b2f3a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98721","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98721 — In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initializ…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: cadence: Initialize IRQ state before requesting IRQ\n\nThe Cadence NAND interrupt handler uses both the IRQ lock and completion\nobject. Registering the IRQ before initializing them leaves a window in\nwhich a pending int…","indicators":{"cves":["CVE-2026-98721"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.713Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1ed0ccd5649154bfc00ab11c59262d4f42515252","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/21f027016b1290d13c30b198ae7a00e6b3d1d5a5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/24319f25b641e55f84e55455092a39a2485c78d4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bbd87eca5407288f2b63ff9357c611cd57e7e640","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98722","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98722 — In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: block2mtd: Fix divide error when erase_size is zero\n\nThe erase size is parsed from the \"block2mtd\" module parameter and can\nbe set to zero. add_device() then evaluates\n\n        if (size % erase_size)\n\nwith a zero divisor, whic…","indicators":{"cves":["CVE-2026-98722"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.813Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/21d0f05989bf0d5cef57b467a7fa4feefbd7236a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/826170a49ca1315af6b293a02200585b1e2186d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a991c28066e7ba4da7450bb04478849f7ac6a14a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b5965c4221165045e19736794ca5f48ae3d67142","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98723","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98723 — In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: copy the hostid into the ctrl before creating PR pc_refs\n\nCommit 6202783184bf (\"nvmet: Improve nvmet_alloc_ctrl() interface and\nimplementation\") added a second uuid_copy() of args->hostid near the end\nof nvmet_alloc_ctrl(),…","indicators":{"cves":["CVE-2026-98723"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:25.917Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/23194531595c5d1d4454e3a607b0c8fc0c4e8695","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5211fed41d7ec90e9ab7239dc4bffffe4d0b2b62","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d3d6d7efdacc08616d23b3ac42272a494951dc0f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98724","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98724 — In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: pci-epf: reject too-short SGL segments\n\nThe host controls an SGL segment's length. A nonzero length smaller than\none SGL descriptor makes nr_descs zero, so\nnvmet_pci_epf_get_sgl_segment() reads the type byte of sgls[-1] outs…","indicators":{"cves":["CVE-2026-98724"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.020Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/2423a05dd0f21330c47ce0ae1cb54a8b0be821e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/472df1d103dbe3e9d09156f0667e36180e912c46","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5d5fbfbbacd1efb13a9bf91317d4fde859ede4b9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98725","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98725 — In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: fix out-of-bounds wr…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()\n\nnvmet_auth_challenge() receives its output buffer as a void pointer.\nsizeof(*d) therefore evaluates to one with GCC and undercounts the fixed\nchallenge header by 15 byt…","indicators":{"cves":["CVE-2026-98725"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.120Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/7fd3c363eba4f2aceb4b3f31cd1cf65e0dcbaee4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8a9b4c0eef19c207663c1ee888257307c869ca86","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d61131acd742cf97ee64e453383e41b46568513","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fa6778e030bed9841ddcdf96bc7018da9ac03562","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98726","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98726 — In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix underflow in…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-multipath: fix underflow in ANA log bounds checks\n\nThe number of ANA groups advertised through Identify Controller sizes the\nANA log buffer. The ANA log header and group descriptors independently\nsupply the number of groups an…","indicators":{"cves":["CVE-2026-98726"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.237Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/03a0c21f0fd7a872953aae5714303d8f38d1e567","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/49e8a3224c91fd5fbf22f4adcca6c8209cfdd6fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/63fa2d9c9c37020bd2703fe2a6a38027b5abeb15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e5cdb0c0a51e8ff49914ae16ef5360010c40cc85","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98727","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98727 — In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLK_FEAT_ZON…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-multipath: set BLK_FEAT_ZONED only after the zone info is known\n\nThe namespace head is marked zoned at allocation time based only on the\ncommand set identifier.  If the zone info query reports a zero zone size,\nthe path namesp…","indicators":{"cves":["CVE-2026-98727"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.333Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/2d86abd28071481a1abd87204a47325975dc821c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/44dc998c38fb5e153c3ed5665f1112661841c3f5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4a5e49ba0abb8b4328d6318c9aef0c0121f95507","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8b85838c1fdba5ba90152693ca158aa9660c628f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98728","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98728 — In the Linux kernel, the following vulnerability has been resolved: tpm: fix off-by-four bounds chec…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: fix off-by-four bounds check in tpm2_get_random()\n\nWhen the response carries the TPM2_ST_SESSIONS tag, tpm2_get_random()\nskips the 4-byte parameter size field before locating the random data,\nbut the bounds check still validat…","indicators":{"cves":["CVE-2026-98728"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.430Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/42bb6216b861e892512128219ff23010d656ba14","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9b522400bf5c082feb9a0037a053ea822a2c7e4d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/be54101992c2c5218be0e0a87827ccc96e3089af","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e30a2406408d2df6d9cd48c2e59e913cf266a05a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98729","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98729 — In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply va_align to…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm: Don't apply va_align to hugetlb mappings on AMD F15h\n\nget_align_mask() returns huge_page_mask_align() for hugetlbfs, but get_align_bits()\nadds va_align.bits regardless, so vm_unmapped_area() returns an address off the huge…","indicators":{"cves":["CVE-2026-98729"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.530Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/b46b2e2de47ca9449532b0a7110ed99f79061d6e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d2457a7e2727dc747a61a50d65c2f259afce8c45","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fe23680e6f1d52b8cc45d77bf7c54249508a81c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98730","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98730 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: reject…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel_pcie: reject oversized TX packets in send_frame()\n\nbtintel_pcie_send_frame() eventually copies skb->data into a fixed\nBTINTEL_PCIE_BUFFER_SIZE (4096) DMA buffer via memcpy() in\nbtintel_pcie_prepare_tx(), with a 4…","indicators":{"cves":["CVE-2026-98730"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.623Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/3d6ba6be9bef13edcd4ad74f7cfdd0c34db4d2bc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/84df222de86eabed543361025ed54ce838c0b573","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9806a748f9ab223b733624367b6ddda77fb9450e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f771f96557a4d953a7e4d045870547271e36e819","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98731","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98731 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix ple…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()\n\nplen is u16 and computed as HDR_SIZE + dlen. For ACL/ISO frames dlen\nis a 16-bit field, so a value >= 0xFFFC wraps the sum, bypassing the\n\"skb->len < plen\" ch…","indicators":{"cves":["CVE-2026-98731"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.710Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/7dbeb6935ac331b0cba6c41cabd8e9d02d5f64ea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b2cb5ea1dc8cf829816370fc1399e6a1d2d1bca9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3a3842c109ac130c6db3aa0014cc8cd344928ad","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c3b5e6da4ba6485bffda9753d8339c28855207aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98732","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98732 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: fix buffer o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: fix buffer over-read in btintel_hw_error()\n\nThe \"Exception info %s\" print uses skb->data + 1, but the 12-byte\npayload is not guaranteed to be NUL-terminated and can be read past\nits end.\n\nBound the print with \"%…","indicators":{"cves":["CVE-2026-98732"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.807Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/40eb4b18ad167b63644c27fa67a7400ba050379a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/673f707518e8ef03306f84c512cb160971f175fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bbc7de352f3f3864369c904aac944c7de84c6e7b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c42ce5373405ca93946311652c51ccfeb1c2d913","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98733","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98733 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Serialize fragmented ISO packet queueing\n\nThe fragmented path in hci_queue_iso() calls __skb_queue_tail() without\nholding conn->data_q.lock. The socket lock serializes senders, but the\ntransmit worker can concu…","indicators":{"cves":["CVE-2026-98733"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:26.900Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1a572db43c057566771b485598ad2e66cb390821","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/708cdd203d0bbcf9255fffb2e4c308d5b28851a7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a7161730a3ab3f0a3896000db7ab0284683936e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d6d709981208567868c5c01ebd1bec5e5e7fdab0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98734","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98734 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize S…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Serialize SCO and ISO scheduling with teardown\n\nhci_low_sent() selects a connection under RCU but drops the read lock\nbefore calculating its quota and returning it to the scheduler. The\nconnection is then used…","indicators":{"cves":["CVE-2026-98734"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.010Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/101825c09ad6b7daa6cf4c9e6b1720b13de15596","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1681f97afdf92e8557f2f3118ddc898471b5d299","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/848a7a91c7f03675d3bd8db6f7721cbf9cb50e21","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ecdb1c66d8e14e63731c52d6fbcfa604064913c4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98735","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98735 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize A…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Serialize ACL scheduling with channel deletion\n\nhci_chan_sent() selects a channel under RCU but drops the read lock before\naccessing chan->conn and returning the channel. The ACL and LE schedulers\nthen use its…","indicators":{"cves":["CVE-2026-98735"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.127Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/4fda8f0abeea9929036446d89a476fb8298abcb0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/51f95ea451f25d7e3f048c0f438f04fa74688aae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/86e9708f9d19a7f1bd5dc9c1652d07707f79f5bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f4845ab191a4f686a5da481fbba90ed73bb693b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98736","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98736 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Lock parent…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_conn: Lock parent access during enhanced SCO setup\n\nBluetooth: hci_conn: Lock parent access during enhanced SCO setup\n\nhci_enhanced_setup_sync() runs on the request workqueue without the\nhci_dev_lock held by its call…","indicators":{"cves":["CVE-2026-98736"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.237Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/024e05f73a4c1263d031614bc36700ec135eecb4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1239ef0fa809b5952fca679db3faa3e1c00e1dac","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/93a737e4e042f59673cd580d35214f278d7b757d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cabd58d9bb66d49d481f762ce986173db397435d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98737","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98737 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix inquiry…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Fix inquiry cache use-after-free\n\nThe sync command worker holds hdev->req_lock, but inquiry-cache updates\nand flushes use hdev->lock. Both hci_acl_create_conn_sync() and\nhci_stop_discovery_sync() look up entrie…","indicators":{"cves":["CVE-2026-98737"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.370Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/333257e6e4a7bcaaea82fd357121d0f1e6b76c7b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/52edf1c0e59dea37b8368c4a2559dca96b2fdfea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8ed67535fdff40ca652bcd4ac7da68d11d01bd34","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a642f498f0b08f2aa9f4a69468db92f57a72349d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98738","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98738 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Serialize SMP remote…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Serialize SMP remote OOB data access\n\nbuild_pairing_cmd() looks up remote OOB data and copies its contents\nwithout holding hdev->lock, which serializes the list's writers. After\nSMP finds an entry, a concurrent managemen…","indicators":{"cves":["CVE-2026-98738"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.477Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1e11412a1b9854a89d044576d616675b16141d87","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/81a2345f1984f0b36d3226571bc196316a01b648","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/889c61e3d0f1091a958e4b2a24b20bab23d915c4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/df5162eeb10e69fe0c2349503882c4a09077f001","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98739","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98739 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix initial p…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Fix initial port reference race\n\nFor RFCOMM_RELEASE_ONHUP devices, rfcomm_tty_install() and\n__rfcomm_release_dev() both use RFCOMM_TTY_OWNED to decide who drops the\ninitial tty_port reference. The release path te…","indicators":{"cves":["CVE-2026-98739"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.590Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/0a554901bd227537f79220443b2b36d585d62893","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2d696c1ed3468dcb62578a3911e687110d463520","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a03ccf1ab77380d4c4a3c56552e12de4a83efa21","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e5aa7fbf7a4446bb89f0b8394b2dfc1a6b6aba5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98740","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98740 — In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Drop __init from EC…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/altera: Drop __init from ECC setup paths for re-probe safety\n\nSashiko reports:\n\n\"Does suppressing sysfs unbinding fully prevent the execution of freed __init\nmemory? If altr_sysmgr_regmap_lookup_by_phandle() returns -EPROBE_DE…","indicators":{"cves":["CVE-2026-98740"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.707Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/4ec26cb7984740941892ad21fa974963c198bfaa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9846b85c2eb8b749c3f14bdcc31b1070f6aabba8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b62a264163ca51bee04785c581344751812395df","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98742","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98742 — In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize compat port…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: Serialize compat port-info ioctls\n\nThe native sequencer ioctl path serializes handler calls with\nclient->ioctl_mutex, but the translated port-info compat path invokes the\nsame handlers through snd_seq_kernel_client_ctl()…","indicators":{"cves":["CVE-2026-98742"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:27.920Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/413211dd31cb2ef2fc99fb0aa1a037a97509502c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/702d92f361f65d9698c473c7599d471395dc4341","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/95b2e0361c88753afa030c10698be0a1a5b67650","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fc5c52848e405b6efb073db5035bb9ebaed11ec4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98743","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98743 — In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type\n\nstream_config is not initialized before being passed to\nsdw_stream_add_slave().  The type field may contain garbage and is\nlater copied to stream->type by sdw_co…","indicators":{"cves":["CVE-2026-98743"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.037Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/174d160884199cad97413f33fe1b56027dc0d3e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4e337c24c0a97fcdb394f954208971de5d372066","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7791ebf56eb4ab6b7a20252757a3029bc8068715","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d195c8c763fdd0a7f74a34973f8946215a708f1e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98744","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98744 — In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix unin…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: max98363: fix uninitialized stream_config->type\n\nstream_config is not initialized before being passed to\nsdw_stream_add_slave().  The type field may contain garbage and is\nlater copied to stream->type by sdw_config_st…","indicators":{"cves":["CVE-2026-98744"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.140Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1c251426bb67de5cbfd3b5550bd5983736e8b9c7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7df8c39a50f364c04d68881e61ba1ecad29d4b72","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bcd61aa247c28b721ac21dda6e4135f75a2de29f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f44ba04c7a32bd13dbdcd814385b8629d0ee95e3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98745","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98745 — In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Forbid non…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\narm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems\n\nWhen system_supports_sme() is true but system_supports_sve() is false,\nrestoring a specifically crafted SVE signal context can result in the\ntask erroneous…","indicators":{"cves":["CVE-2026-98745"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.237Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/2bce6f006cfe0b60e8249fd8d51396d99355cba3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88c1c611552b24658eb61244086691c02be2013b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e060d9069b49fe55f38057dfe592068014652671","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f2338929c7663859c0c74dd6fef2c0245066f845","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98746","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98746 — In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock refere…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nserial: ma35d1: Fix clock reference leak in ma35d1serial_probe()\n\nof_clk_get() returns a clock with a reference that has to be released\nwith clk_put(). ma35d1serial_probe() never does that, so the reference\nis leaked on the probe e…","indicators":{"cves":["CVE-2026-98746"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.363Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1b303d383089aae7f20ad19fee15690486b935cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/547c742f3b4acd4634eec47e9bff8731b55059a0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/98401cf912fe8a081ef8e500c421b6d957b55a99","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d8233d6b391b4cd87df6e89056c21496df7a3012","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98747","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98747 — In the Linux kernel, the following vulnerability has been resolved: serial: core: fix NULL pointer d…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nserial: core: fix NULL pointer dereference in serial_core_unregister_port()\n\nport->port_dev is NULL when no port device is installed: it is cleared\non teardown, and never set if registration failed before\nserial_core_port_device_ad…","indicators":{"cves":["CVE-2026-98747"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.460Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/499485a67fbacf4d9afbdb43522388c64f853428","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/54abbb862366dcaf1f22f1e968358147b7d0547d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98748","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98748 — In the Linux kernel, the following vulnerability has been resolved: serial: 8250_bcm7271: fix use-af…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250_bcm7271: fix use-after-free in brcmuart_remove()\n\nbrcmuart_handle_irq() starts priv->hrt to work around a receive-timeout\nquirk of the 8250 core when hardware flow control is enabled; the timer\ncallback brcmuart_hrtime…","indicators":{"cves":["CVE-2026-98748"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.557Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/0794ba5332754866b2f1c0cca668775be3ffcf0a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/189b9dc8c96ec9486482f27c1372b04a7152175e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e32440fa536af96bdbc61d933a7c3a920b965edc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f5ce06e648d775cc1ccf66f4f594bb8b559a7d8e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98749","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98749 — In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: serial: max3100: shut down timer before freeing port\n\nmax3100_shutdown() stops the polling timer but returns early during\nsystem suspend. If the SPI device is unbound before resume, the serial\ncore does not call max3100_shutdo…","indicators":{"cves":["CVE-2026-98749"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.660Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/247b8f680876313586aed4d267bfcceddc2b4901","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2c8614981d3e6e000427de0ab2426ab68274d850","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/db0949bbd06db0a75b4b1076f1e25194be7d956a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fb668620e3b163962dabe1a674725a07aa44ff4a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98750","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98750 — In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset rac…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: fix saved termios reset race\n\nResetting saved termios state on device registration is needed where a\nminor number can be reused for an entirely different device and where\nthe old settings may prevent the port from even being o…","indicators":{"cves":["CVE-2026-98750"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.767Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/08bf919f041af9de372428bb0c938157ea144164","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1572d86bcf0bcb848d20fc5e5de7ed6963034c2b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8df07fe93573e9e548d6645273e9bcb6eb74059e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dcaf0251f847a45861e94c6617024a9455687d2f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98751","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98751 — In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on h…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: abort break signalling on hangup\n\nThe break ioctls can race with hangup and end up calling into a tty\ndriver for a device that is already gone or powered down.\n\nDrivers must handle this race, but TCSBRK and TCSBRKP should stil…","indicators":{"cves":["CVE-2026-98751"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.880Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/3bc82999fb85cecc7eb6ec1755ee7d698aa1e783","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/845a2737e0f5ffe5ca8d38de556012b0c9472cdd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/94af6cd832e9b4ce39a8fb59144a8f09ab56fd35","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c8ccd3b2013daaf77b98f8a6724fcf4d2c5c52d6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98752","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98752 — In the Linux kernel, the following vulnerability has been resolved: tty: port: fix tty_port_tty_vhan…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: port: fix tty_port_tty_vhangup() race\n\nDrivers rely on tty_port_tty_vhangup() to synchronously hang up their\nports before tearing down resources as part of deregistration (e.g. on\nphysical disconnect).\n\nIf tty_port_tty_vhangup…","indicators":{"cves":["CVE-2026-98752"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:28.993Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/017b18addbe8dcace1a569a00d40ed1ba1e03f4c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6b7be3b9b857947e9c1338d4919d4ebd3b75e907","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6d1a984afc3ca477dab3e51ec806671d443ad524","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b48820de8c1a596c5b99775524dfce73c6576c5d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98753","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98753 — In the Linux kernel, the following vulnerability has been resolved: tty: tty_port: restore TTY_IO_ER…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: tty_port: restore TTY_IO_ERROR on activation failure\n\nMake sure to restore the TTY_IO_ERROR flag if activation fails to\nprevent I/O attempts on a port that is gone or powered down.\n\nThis specifically avoids issues like kernel…","indicators":{"cves":["CVE-2026-98753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.103Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/34d4f67472ef7a744970b772a8565ddc727788e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/56964f6a31238fb41d5830bb42520c5b10ff7d8f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6388409b711eb91b14fa075a4d861ccc4df1cfe7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7021acc84c2e0add77a1a33152e3a1e428fdbfdb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98754","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98754 — In the Linux kernel, the following vulnerability has been resolved: tty: vcc: hold port lock when cl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vcc: hold port lock when clearing tty pointer in vcc_cleanup\n\nvcc_cleanup() sets port->tty to NULL without holding port->lock, racing\nwith vcc_event() LDC callbacks that read port->tty under port->lock and\nthen use tty->port.…","indicators":{"cves":["CVE-2026-98754"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.203Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/03b49c991abb8d021ca6fe51cd173447236b0552","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1a9fb9eaeb69b1f6c00bed09289a33d9fe1e7ae4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/821050631750e982007c0856c119346edba51cae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88f6ecb058801e9ce7b9aabc966530118d7cd53c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98755","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98755 — In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize contro…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntty: vcc: zero-initialize control packet in vcc_send_ctl()\n\nThe stack-allocated struct vio_vcc pkt was partially initialized,\nleaving the tag.stype_env field uninitialized before being sent via\nldc_write(), potentially leaking kern…","indicators":{"cves":["CVE-2026-98755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.300Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1f71f565e3585da1098ff19ca3c24687dab59185","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/399aa38af1d78001612e3130b2056ea392a355ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4335278d0e75395cbfaf71c84b521df56d69e936","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6f1a08ef02825b440126c406ea63ef6128888e15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98756","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98756 — In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix NULL pointer der…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe\n\nThe Cadence USBSS controller is a two-function PCI device. The first\nprobed function allocates the driver data and stores it with\npci_set_drvdata(), while the second func…","indicators":{"cves":["CVE-2026-98756"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.397Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/45b606418bae73c7cde9f0e57e5b0977c816a7c0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/549c04df02f1bb5a10342f32e2c87f5d27c97279","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d16046f1ace2691b6a946f022fe6dc215936880b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e5052f2c5c73c1dcca42bafc0bc737af2b2af059","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98757","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98757 — In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix use-after-free i…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdns3: fix use-after-free in cdns3_gadget_exit()\n\ncdns3_gadget_start() arms two works on system_freezable_wq:\npending_status_wq for the deferred ep0 status stage and aligned_buf_wq\nfor realigned request buffers. Both handlers…","indicators":{"cves":["CVE-2026-98757"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.500Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/159dada48ee2d53eff46e66a8011d67b2c209bbc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/95160fe606e685ff18de1e6ddcbc08289476004e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc448700db656cceb4b411bf99a2e7132144d035","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ebe9b68c396792c15d0ac690d592e449e74ed804","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98758","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98758 — In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix use…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: ucsi: glink: fix use-after-free of ucsi on remove\n\nThe pmic_glink client is released by the devres cleanup, which runs\nafter pmic_glink_ucsi_remove() has returned, so its notification\ncallbacks can queue work until then…","indicators":{"cves":["CVE-2026-98758"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.607Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/41934f92e7a54d4080ac0b17aacc83224946785c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/432b58cd959e594909a581b4974396cdbc9d4ca1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/63b269ec537dc0fd26d0bd64872c26860d108c9d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ee8577de01c6b6c7dd1d76b52242c54d37a989f4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98759","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98759 — In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitiali…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()\n\ncd321x_update_work() passes a stack-allocated typec_partner_desc to\ntypec_register_partner() after initializing only usb_pd, accessory and\nidentity.\n\nt…","indicators":{"cves":["CVE-2026-98759","CVE-2026-98760"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:29.700Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/5414144e202a32437e3eb436cd3f5f00d79ad86e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/75dc6cb377efd2f4428b7f76d3a590a0bbc10399","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88c7e458af53ff781a3f1051708395892b325576","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/282be6ae8be791762740107c79cecf5121f66063","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4b6823ce0e548491cb9663303cba28e18d351096","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c4b27b3605788bbf9e4251f3cd4ab94645ab036f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dac0c073c6ad5f1bbb5e9fea9023fc1b4dab5e14","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98763","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98763 — In the Linux kernel, the following vulnerability has been resolved: usb: core: clear both ep_in and…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: clear both ep_in and ep_out for non-ep0 control endpoints\n\nIn usb_enable_endpoint(), non-zero control endpoints (where\nusb_endpoint_xfer_control(&ep->desc) is true) populate both\ndev->ep_in[epnum] and dev->ep_out[epnum]…","indicators":{"cves":["CVE-2026-98763"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.113Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/0e8baa78d872f2db440d8b9ded946ab8dceb89eb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1da16c46b8d7101b74bc2d72a04e23cf5c7ddea1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7a9f61476b0e8002092a52ee8295edeeb0a28d1e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c50413ecb662ea43c7f487632c8114721743a277","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98764","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98764 — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix NULL poin…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC\n\nWhen user space sets up FunctionFS with only full-speed descriptors\n(e.g., flags = FUNCTIONFS_HAS_FS_DESC) and the gadget operates at a\nhigher speed (such…","indicators":{"cves":["CVE-2026-98764"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.217Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/35ab269602e1f7c4c0fe6ea3477264bea77eced3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7811d8e26c77f8eea79e22d0d14c67ec0658b348","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9cd072788c76595529eb38f42bf94d23852f8534","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9d8761b3c133f6c6a6d3486839dac60e2cf4bfe3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98765","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98765 — In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: dummy-hcd: Fix wait for outstanding request completions\n\nThe dummy-hcd driver emulates synchronize_irq() by waiting until its\nprivate callback_usage counter drops to 0 (with the private lock not\nheld).  This counter is…","indicators":{"cves":["CVE-2026-98765"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.323Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/3070806a7bc7bb36ed04a21022c09dafcc5619f4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5298c96bf0068f3160969f7ddad81976d01a9b66","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7ce4dca0d53b1c3cb2b7e7bb2e42bf5db860caf2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b263ff9b0fc5c1f371d65c4eb196b31263d039ff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98766","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98766 — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: aspeed-vhub: cancel wake work on device removal\n\nwake_work is armed from the gadget .wakeup callback to resume suspended\ndownstream ports, and it is never cancelled in ast_vhub_remove(), so a\nwork item queued before or…","indicators":{"cves":["CVE-2026-98766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.440Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/20388c8d1d74c203fec8194c45cd31afdfab934e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/474e9e1852fb5ba0bfb26f123dd0cb361d0f4f4d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c81504dfd2d93e345c98e7a012c2f2e74ce5b6a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f343bfa3fc9f6255602d66f4a7dbe7ddef13ba41","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98767","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98767 — In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: fix IRQ storm…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: fix IRQ storm on invalid event buffer count\n\nWhen dwc3_check_event_buf() reads a GEVNTCOUNT value exceeding the\nevent buffer length, commit 63ccd26cd1f6 (\"usb: dwc3: gadget: check\nthat event count does not exceed…","indicators":{"cves":["CVE-2026-98767"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.550Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1ff77cbefe5a653ea12874c213ea4bd0d72c1067","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/96918ca25ff467c25675478fc79393df4ae9d74c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ba927133b301894e7d24099afbb701887c8cd2f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f51cadb02b439850ab411df0a2cf4288a66d42e2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98768","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98768 — In the Linux kernel, the following vulnerability has been resolved: usb: typec: anx7411 - stop the I…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: anx7411 - stop the IRQ before destroying the workqueue\n\nThe IRQ is devm-managed, so it can still queue plat->work while\nremove() is tearing the queue down. Disable it first.","indicators":{"cves":["CVE-2026-98768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.683Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/469600d5d292b1482c90dd6853555821d11b8c5f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/50a92c02551c10e308caa55f7045f31abcef511f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/675056e0edb49c0002ebfbc289e6c777bbf315a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cb6bf2c707805211f606fb1e06fe28d9affe5ea7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98769","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98769 — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: vali…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd\n\ngeneric_set_cmd() and generic_get_cmd() use the low nibble of\nctrl->bRequest as an index into con->data[]:\n\n    u8 cmd = (ctrl->bRequest & 0x0F);  /* 0 .…","indicators":{"cves":["CVE-2026-98769"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.813Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/36f3f009049bc91e14dc856007932473318d12f8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/697cfe6e53b66cda196d6f8833b0ee97fefd0a8a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8c611876c002d712ae5f246af5188432c708f79d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9062d50e75c24dc7911be05c9b1719b3b256af15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98770","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98770 — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix the jack…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: midi2: Fix the jack descriptor array sizes\n\nThe jack in/out descriptor arrays in struct f_midi2_usb_config have\nthe size of MAX_CABLES, which look reasonable -- but it turned out to\nbe incorrect.  Namely, the entries f…","indicators":{"cves":["CVE-2026-98770"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:30.920Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/223c3bd02a582776d8ee47dae7b69d3258420694","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/310c2d4608d8c1a2baa57db1dfd319c5c40cf4a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8294ff75a9de23f7cc641e5e5ca31fa6ea72a574","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/87f2185423e01f113811301878f2f67eccec960d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98771","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98771 — In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierra_ms: reject…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: storage: sierra_ms: reject short SWoC info transfers\n\nsierra_get_swoc_info() requests sizeof(struct swoc_info) (60) bytes\nfrom the device via usb_control_msg(), but its callers only treat a\nnegative return value as failure. A…","indicators":{"cves":["CVE-2026-98771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.020Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/8a0200d14acd9db388b85cd016e68a4e60d900ec","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c85e8331d298b8f1dee8fe63718e76435cec7133","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/db9d3be156baca6ef80ae5d93acfeb85c61a74dd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e2d62928f2666a2964a23b1d39e6e762f0628d7b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98772","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98772 — In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix port tear down…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: fix port tear down use-after-free\n\nSome drivers for multiport devices access port driver data from\ncompletion handlers of shared URBs submitted at attach() or first open()\nand stopped at disconnect() or last close(), r…","indicators":{"cves":["CVE-2026-98772"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.127Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/33c920f7c5952dfc42d1b8ea6efe16b1f0bb0c5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5e8980a81af195c49084be5b4c031085b56c7443","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/60cc9379c3e650d1ebfba4de63f1242537a62a32","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e80ee74206f260eb1282e7d1339ff146a4a410d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98773","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98773 — In the Linux kernel, the following vulnerability has been resolved: USB: cdc-acm: skip URB restart i…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: cdc-acm: skip URB restart in port_shutdown if disconnected\n\nacm_port_shutdown() is called from the tty-port machinery whenever the\nlast user closes the port.  acm_disconnect() sets acm->disconnected and\ncalls tty_port_tty_vhan…","indicators":{"cves":["CVE-2026-98773"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.223Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/420ca35af891d33522cc08504768ccd60a4c450a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9742905d9ed5bf23ebe4c100dec80b6bc50fb522","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a0ed07b5bbb2d8fcef86810453216070691816e7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dc614d6bc991740d41d5a99ac7765c4b675dda88","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98774","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98774 — In the Linux kernel, the following vulnerability has been resolved: rust_binder: cancel deferred wor…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrust_binder: cancel deferred work items in thread exit\n\nIf there are deferred work items on the thread todo list, then they are\nnot cleaned up in the Thread::release() method. Thus, update the code to\nclean up the work items even i…","indicators":{"cves":["CVE-2026-98774"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.340Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/62479b6e5df82cbdf3c4145130928f233fae78fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/98dc9fababd1b7fb1a88b8362183baa5779c2394","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d54df2de22f9ac5b660d0ec898986f805e97c096","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98777","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98777 — In the Linux kernel, the following vulnerability has been resolved: binder: fix leaked fd fixups on…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: fix leaked fd fixups on TF_UPDATE_TXN supersede\n\nWhen a TF_UPDATE_TXN transaction supersedes a pending async transaction\nin a frozen process, the outdated transaction is freed with kfree()\ndirectly. This skips binder_free_t…","indicators":{"cves":["CVE-2026-98777"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.657Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1299cb3fb061598496086fc87ff291057831148e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6673f4f21e2fddfed0abe1eb9045cc958e6db130","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7fd609fb0e9dcbc4d7a1e4da1af5368c0555ff55","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c4c02084d6687d5cd5edccaf52cc45e5160f1184","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98778","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98778 — In the Linux kernel, the following vulnerability has been resolved: binder: fix is_failure flag for…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: fix is_failure flag for superseded transaction cleanup\n\nWhen a TF_UPDATE_TXN transaction supersedes a pending async transaction,\nbinder_release_entire_buffer() is called with is_failure=false. Since the\nsuperseded transacti…","indicators":{"cves":["CVE-2026-98778"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.757Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/1ab671b50714ad8e359cf37eb041d8044319ccdc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/22c135635fdd9816c0ef140d6de7b2e4fdf73e89","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/60a9f7323ae7318a7cce0d387c318da24f1e8726","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/86cdcc87d4ba60aebf94ba3346b3c900c5cd79ff","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98779","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98779 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ACP MFD device l…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix ACP MFD device leak on init failure\n\nacp_hw_init() registers ACP child devices with mfd_add_devices() before\nattaching them to the ACP power domain and initializing the hardware.\n\nIf attaching a child to the power d…","indicators":{"cves":["CVE-2026-98779"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:31.853Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/2b9a53940a2bc063ea4cd09ee49220a503a0170c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/587469076e4ffb617f7ad1a0c4a13072a3e87113","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/abf854513bc19e6e24d45353ac99ec5627ee0acc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f0013046151b7467e62c471c1c83d63ea255799c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98781","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98781 — In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Fix pdev reference leak in mtk_drm_bind()\n\nWhen the device is not the mmsys master, mtk_drm_bind() returns early\nafter taking a reference on the disp-mutex device via\nof_find_device_by_node(), without ever dropping it…","indicators":{"cves":["CVE-2026-98781"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.060Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/3753e34b73fcbe2a2edbe984614a008a261697ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4a8f9cad0fced77b36b297c67c42730c9cb32ec6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b84f1386d84b3a73f73ebb416a3f97c5d64a8ab3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cb3e0244514d13507c6048777e1d0277e611cf6c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98783","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98783 — In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing IS_ERR…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device\n\nplatform_device_register_data() can fail and return an ERR_PTR, but the\nreturn value is used without checking, leading to an invalid pointer\nbeing stored in dd…","indicators":{"cves":["CVE-2026-98783"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.267Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/4acac370aad2d4895a82f40b2f03e9ef70eecaa6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88f8a92dcb0cb154774595dee7226458de4cbd38","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aeef8a8537bcfb26689edb36ed905b8b2873001c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bce7698e2e6565bb765bd0522337f29f5f312624","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98784","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98784 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware le…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/gfx6: fix firmware leak on teardown\n\nThe firmware requested in gfx_v6_0_init_microcode() is not released\nwhen the GFX block is torn down, leaking the firmware resources.\n\nAdd gfx_v6_0_free_microcode() and call it from gf…","indicators":{"cves":["CVE-2026-98784"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.367Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/3a86ebf6aa8b0a845e6188daaa6f530fe67ff00e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4b70c6b34912ca0b4066f56fd627d785dfbfe1fa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/652f631e2e3a8d3b11ad72dd0b8e59b5183de0d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc172e177795c5f87bc2d71768d077e1c10633e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98787","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98787 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration prote…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()\n\nbpf_mem_cache_free_rcu() uses this_cpu_ptr() which requires migration\nto be disabled. All callers of rhtab_delete_elem() disable migration\nexcept __rht…","indicators":{"cves":["CVE-2026-98787"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.690Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/94f41ec5fa578765b74ad5736c2f029e7aabc46d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/de020dc8049bfb2b22e3b6d99c031feb2e22d112","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98788","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98788 — In the Linux kernel, the following vulnerability has been resolved: futex: Fix private hash use-afte…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfutex: Fix private hash use-after-free on resize\n\npoll_state_synchronize_rcu(mm->futex.phash.batches) is used by\nfutex_ref_drop() to check that a grace period has passed since the\ncurrent hash was published. This relies on batches…","indicators":{"cves":["CVE-2026-98788"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.787Z","fetchedAt":"2026-10-20T03:01:48.461Z","references":[{"url":"https://git.kernel.org/stable/c/5d5dc18b3a9ac011619b7d3af4514bf9e9b6a6af","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f35e3b5784221654f9cdbd6222275a7fa203f6c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98789","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98789 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix objects stuck in free_b…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix objects stuck in free_by_rcu_ttrace\n\ndo_call_rcu_ttrace() returns early when call_rcu_ttrace_in_progress is set\nand leaves the objects in free_by_rcu_ttrace. __free_rcu() frees\nwaiting_for_gp_ttrace only and clears the fla…","indicators":{"cves":["CVE-2026-98789"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.887Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/33d0a5d2fee06a51f2f056dd901296515912e954","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fbd97dd1d3ce32d32fb7be86acc3fdb7c04fa043","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98790","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98790 — In the Linux kernel, the following vulnerability has been resolved: perf: Fix race between perf_even…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Fix race between perf_event_exit_task() and perf_pending_task()\n\nA race condition exists between perf_event_exit_task() and\nperf_pending_task() during begin_new_exec().\n\nDuring begin_new_exec(), perf_event_exit_task() may be…","indicators":{"cves":["CVE-2026-98790"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:32.987Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/524063fea29f8a841e49927ea7a8085194ad3ec2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/672b8a9ce8f51b991481dfde26fba5cc4340a91a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/81e61e3f8befa1bae3ec8e779d8ada5e5e362c21","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ffb684f2aa141eeb0caa6308422e7e05d1ded7c4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98791","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98791 — In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF_XDP TX timesta…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference\n\nDuring XSK TX queue teardown, outstanding descriptors are completed\nwithout a CQE. If one requested a TX timestamp, the completion path\npasses that NULL CQE to mlx5e_xsk…","indicators":{"cves":["CVE-2026-98791"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.087Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/63df0ef4c6e3105589e6bb2e758ce611b0ada86c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7b97273cbebe9dd4fddc457f0c4f2a124d0e3996","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f81d40e2eb69552334f510114f3e6edd0d43178b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fce70b6bf9f3261e887419a4e7caa25b80fa9d55","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98792","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98792 — In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: generalize…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: flowtable: generalize pending status bit\n\nRename NF_FLOW_HW_PENDING to NF_FLOW_PENDING and use it to inhibit the\nflowtable GC worker until pending hw offload work has been completed.\n\nApparently, nf_flow_offload_stats()…","indicators":{"cves":["CVE-2026-98792"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.183Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/4033e1a9262c57dfbfc594a591a50fcba63c531a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4d52b72f3aa68ad0536444e36530bda75070194c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7c549fb7eecd01fdba7c0d12c01da876ef8a3214","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a2cac45848d1cf31ed190db30f90ba8211e9a8ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98793","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98793 — In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid N…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bpf: reject invalid NAT manipulation types\n\nAs bpf_ct_set_nat_info() is not validating the NAT manipulation type a\nwrong value can be passed directly to nf_nat_setup_info(). This triggers\nthe WARN_ON() at nf_nat_setup_in…","indicators":{"cves":["CVE-2026-98793"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.287Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/16d464013ec2267b00a83f4bfbb97b3ecc63bfa7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/58108f05b0502448f6bb612ee2eccc63bd6449cb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ea777dc90ab37e64fa4b92f6fcf3b5edcef5e058","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f6143ae109df56d51d5536e813deb19eee7a6205","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98794","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98794 — In the Linux kernel, the following vulnerability has been resolved: ipvs: filter some flags received…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: filter some flags received in the backup server\n\nWhile the IPVS SYNC protocol is not secure by design\nwe can still protect the backup server from messages that\ncan wreak havoc.\n\nThis commit addresses problems from received co…","indicators":{"cves":["CVE-2026-98794"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.390Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/45a93111835ccfea7d969ec73588e33745fd9834","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/55d033324f67a15ff56be6d38d6e87f644e0ed62","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f4cd1db7d421e82945713a36084bb0c35b75b27e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f96e91748f6304668fe647e686d199d7207d36f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98795","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98795 — In the Linux kernel, the following vulnerability has been resolved: net: sparx5: skip ptp deinit if…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sparx5: skip ptp deinit if init was skipped\n\nsparx5_ptp_init() returns early on the base lan969x variants\nbecause they do not have the SPX5_FEATURE_PTP flag. It also returns early\nwhen no \"ptp\" interrupt is described. Unbindin…","indicators":{"cves":["CVE-2026-98795"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.490Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0d2c49915bc3aea4521cda5e4d42f24f63b94585","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2879b65bfa548e10d59c5fba91d17f8a00cd7029","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/35c706d6eb1963735814c5f5bb2674a96eacf3cc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98796","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98796 — In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: allo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: allocate dummy netdev sooner\n\nThe RX rings and the shared NAPI are carried by an internal \"dummy\" netdev\n(eth->dummy_dev). mtk_probe() creates that dummy device, and adds the\nshared tx/rx NAPI to it, onl…","indicators":{"cves":["CVE-2026-98796"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.583Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/17eafd74de5a31e30361420a2e3ebf64186b77e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/42001839e425b2564b7297be579073a13a8fddf6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6f0c2c4f5e7143eba75153ecc8af3a03f7b6a98b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/82be3d08de9e14d5aed72377f051adb4f09fd540","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98797","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98797 — In the Linux kernel, the following vulnerability has been resolved: net: cap skb->queue_mapping when…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cap skb->queue_mapping when the tx queue is picked\n\nskbedit can set skb->queue_mapping and raise the per-CPU skip_txqueue\nflag so __dev_queue_xmit() honours the mapping. __dev_queue_xmit()\ncleared the flag before sch_handle_eg…","indicators":{"cves":["CVE-2026-98797"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.673Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/2f581814e4e3ea6a5e98f49813dc4c68444a0c4a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c6ec35c8267c84c2094cb485db20c06384fc2bcc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ea4d4b5dddb5121e64f56fd8e0720bd8b447b63d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f99de42f5c6f8d088063817dad82c3334e87c570","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98798","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98798 — In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix NULL derefere…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bcmgenet: fix NULL dereference in set_coalesce before first open\n\nThe Rx ring priv and index are only set in bcmgenet_init_rx_ring(),\nwhich runs at open. Setting the Rx coalescing parameters on an interface\nthat was never open…","indicators":{"cves":["CVE-2026-98798"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.807Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0d867b91598b6ed2f75998c34f4e2869631da31e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/19419faf58dfe5bcc8a9e60e622976c5f8e3ddc1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2294b62eaec6fd3c76a261d287f66641eeafd5f0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d870102b5425390cab42eebbf3d19ec6a43c6734","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98799","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98799 — In the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in tram…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Skip detached progs in trampoline images that are still in use\n\nbpf_tramp_image_put() makes sure a trampoline image is not freed while\na task may still be running in it, but nothing similar is done for the\nprogs called by that…","indicators":{"cves":["CVE-2026-98799"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:33.910Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/17637e1a581a22466ac3620a91e099683ff9cc6f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/967566ad325b42150483e81acb09ea9d800c00b8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98801","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98801 — In the Linux kernel, the following vulnerability has been resolved: net: restrict SO_RESERVE_MEM to…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_RESERVE_MEM to TCP sockets and cap max value\n\nCommit 2bb2f5fb21b0 (\"net: add new socket option SO_RESERVE_MEM\") and\ncommit d00c8ee31729 (\"net: fix possible NULL deref in sock_reserve_memory\")\nonly checked sk_has_ac…","indicators":{"cves":["CVE-2026-98801"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.137Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/37e02c42a00be692c06343e11779aadc45f45971","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/492e04f9a00f3cc88a1f6899417b10f3019a624e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5069ce898148bd799395c5a464e006cbb840f188","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a467b05b201b5c26be52ed3081992fa9c0387648","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98802","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98802 — In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writ…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nseg6: ensure packet data is writable before modifying SRH and IPv6 DA\n\nadvance_nextseg() modifies the SRH Segments Left field and the IPv6\ndestination address without ensuring the packet data is writable.\nseg6_next_csid_advance_arg…","indicators":{"cves":["CVE-2026-98802"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.250Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/8ae3f4067ba4ae3a15581392f6dac422e3d3def0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e9141fdb7a2ead48cfcd60c681aba91d3014255b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98803","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98803 — In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix rx Scatter-Gath…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: fix rx Scatter-Gather support\n\nWhen a received frame is larger than dma_buf_sz, the DMA scatters it\nacross multiple RX descriptors (rx Scatter-Gather). The secondary RX\nbuffer (sec_page) was only allocated and programm…","indicators":{"cves":["CVE-2026-98803"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.350Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/358d5ac5a5d57ce21c3814c4e3e8f3fbcb7304b4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88095728511e0df9c89528944f5a1762ad298983","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a7cff44543f66f3a19151060cb549691d191d44c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98804","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98804 — In the Linux kernel, the following vulnerability has been resolved: net: page_pool: fix use-after-fr…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()\n\nWith CONFIG_PAGE_POOL_STATS=y, page_pool_recycle_ring_bulk() updates\nthe recycle stats after dropping the producer lock. If it just recycled\nthe last inflight net…","indicators":{"cves":["CVE-2026-98804"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.470Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0b105f4eb78e5ee39e5a74c47c9efd69b6ac849c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bdea4980182e3badac74f04df6c07492b91c569e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f78d45d5f1ac4141a03f033141368671da4293e4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98805","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98805 — In the Linux kernel, the following vulnerability has been resolved: tipc: prevent GCM nonce reuse on…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: prevent GCM nonce reuse on peer key changes\n\nTIPC can encrypt traffic between nodes using a different transmit key\nfor each node. In this mode, the AES-GCM nonce for a packet sent to a\nknown peer consists of a 32-bit prefix (…","indicators":{"cves":["CVE-2026-98805"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.567Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/512ccd3d0e91e791fb37442aa0a2599aca19783d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5c8ce13c792e28d56f9ec3cd6728d8225bc0e3a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/60e0c2aeaa605ff19ca4e65126a35643d4d7ee1c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f74f100e49588c1dbdc6ab3ba9e2c67b36d015d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98806","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98806 — In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assi…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled\n\nPreviously, BPID assignment under CONFIG_DCB assumed\n`queue_to_pfc_map` was always initialized. For SDP VFs this leads to\ninvalid memory access as it was not initia…","indicators":{"cves":["CVE-2026-98806"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.683Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/056994563935e049093f100efaad7e63ad113814","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/59fbbded05e559675930fd521b8d62b72828b52d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98807","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98807 — In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix slab-out-of-bounds when handling team device events\n\nThe mlx5_handle_changeupper_event() and mlx5_handle_changeinfodata_event()\nfunctions check for LAG masters (which includes both bonding and team\ndevices) but only c…","indicators":{"cves":["CVE-2026-98807"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.787Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/04c824940d52871c49866a4ac67b504146f7cf35","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/16ca0e79f31ea810346a79dda545ba344ede1d47","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3a6e67ff267af2053a793825c3b7844741fed461","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8117cbc504cb01980258d8a8c9be8f57cf0aaceb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98808","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98808 — In the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer over…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: systemport: Fix buffer overflow in bcm_sysport_get_stats()\n\nWhen running on SYSTEMPORT Lite, certain statistics are unsupported and\nskipped during bcm_sysport_get_stats(). The variable 'j' tracks the\ncompacted index into the d…","indicators":{"cves":["CVE-2026-98808"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.893Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/29d1d35ad5ad379a904263ea1cd4ba1d71cd965f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/96d8b26be5bc451188acdcee055948da45adbde0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/eb7b84af0ec5c71b4920e999611b466b3784496c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/faba9fdde480356f4a1d3b1a5713b7b354858a1c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98809","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98809 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: don't drain…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: don't drain cmd_sync backlog on unregister\n\nhci_unregister_dev() disables cmd_work and cmd_timer, then calls\nhci_cmd_sync_clear(), whose cancel_work_sync() waits for\nhci_cmd_sync_work() to return. That worker d…","indicators":{"cves":["CVE-2026-98809"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:34.997Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/143bde97c4101ae68eb656c87e620c45b07a3090","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7f16443a30f4e86d84ae4faf057d333b41ddb757","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b1f24c1ab52345e810c42a1a81286cb5a7c92252","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e8ba8c9c74d1035042cdf6cb5adf8f59b9b1271c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98810","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98810 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix slab-out-of-…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()\n\nieee80211_monitor_select_queue() validates the skb length using skb->len\nbefore dereferencing pointers into skb->data to access the 802.11 header.\nHow…","indicators":{"cves":["CVE-2026-98810"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.103Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/63e7064b4c1c4b540bf2f0cba47384f92ab95307","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6f63e919fe1e335b8abcb3a28bfd4804a98d875a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98811","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98811 — In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: reclaim an e…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_api: reclaim an empty proto on the error path\n\nTwo racing tc filter add requests on the same chain/prio of an\nunlocked classifier both run change() on the shared proto and both\ncan fail: the winner's tcf_chain_tp_del…","indicators":{"cves":["CVE-2026-98811"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.200Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0bb8eab29b55045281a4963d4557f2776cdf8cfa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/315e4fe65cf02ef052de5e6298c3088e448b7517","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/570141625d212fbbcffb9665cb45c0f04610e61a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ebc9611ab154c0cd9f1320e2a73f5e936d7535a9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98812","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98812 — In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctp_dev o…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mctp: publish the mctp_dev only after it is initialised\n\nmctp_add_dev() links the new mctp_dev into dev->mctp_ptr before mdev->dev\nis assigned, so a reader that picks the device up in that window\ndereferences a net_device point…","indicators":{"cves":["CVE-2026-98812"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.313Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/63120572edde85bb2b70b0ed4d4817ed52247613","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aadf655e8ea9a8ffa24bb8d69f504572e8d18181","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/af6e4f931afc2d670d133aa2bedc8b6e3753c618","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f37f42e6e039a48c2dcf6c079b9f7fbc864ab7ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98813","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98813 — In the Linux kernel, the following vulnerability has been resolved: bpf: Hold map BTF for the memory…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Hold map BTF for the memory allocator destructor record\n\nbpf_ma_set_dtor() duplicates map->record so that the bpf_mem_alloc\ndestructor can release the special fields of hash and rhash map elements\nonce the allocator frees them…","indicators":{"cves":["CVE-2026-98813"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.427Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/ab39974240a0cff765f3bb9cce81d8001ffdb144","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b506f5699e145196ee29d76cf1ca1cbb2202c055","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98814","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98814 — In the Linux kernel, the following vulnerability has been resolved: nvme: fix command effects log li…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: fix command effects log lifetime for multipath heads\n\nKASAN reported a use-after-free when an I/O passthrough command was sent\nthrough a multipath namespace head after the controller path that first\ncreated the head had been…","indicators":{"cves":["CVE-2026-98814"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.540Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/351d1c47e45b2b35780d0548b1012d7242ba298d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/72ece656abd4de8645a421fb482d7a11e6533a45","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98816","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98816 — In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overflow of jump offset…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix overflow of jump offset in constant blinding\n\nbpf_jit_blind_insn() rewrites 'if rX op imm goto off' into:\n\n  AX = imm ^ rnd\n  AX ^= rnd\n  if rX op AX goto off\n\nand subtracts 2 from off when the jump is backward. off is s16…","indicators":{"cves":["CVE-2026-98816"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.770Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/443328237113ee0ea515e506497334d871dbc2aa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ad139384ecddb6f3e7e3c3c12765aafae0e39670","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98817","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98817 — In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add better pm_runtim…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SDCA: Add better pm_runtime error handling in func probe\n\nAdd a common error path in probe that balances the runtime PM reference.","indicators":{"cves":["CVE-2026-98817"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:35.890Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/1f90c62a2412b3b9af27e0d23e346efcf88d83bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/91094f9c86216898ce92141c26c8fec7e97544c0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98818","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98818 — In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not wake up kswapd i…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slab: do not wake up kswapd in __kfree_rcu_sheaf()\n\nSince kfree_rcu() can be called under pi_lock (a raw spinlock in the\nscheduler), kfree_rcu() itself should never allocate memory with\n__GFP_KSWAPD_RECLAIM as waking up kswapd e…","indicators":{"cves":["CVE-2026-98818"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.017Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/46545c86b54ffb969b6e3662942b4a6191619eaa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/af2fb3ee6679b517e2fdbd3ba16ec276a8b74312","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98819","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98819 — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: validate DDC record lengths\n\nParse DDC record lengths in unsigned storage so 0xFF does not wrap.\nReject records smaller than the mandatory three-byte header, records\nexceeding U8_MAX, and records exceeding remai…","indicators":{"cves":["CVE-2026-98819"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.143Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/069031f569f1681f17e863f48c221a6091b47850","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b0fce76873a5e6a6820354409b26693ac5f8b251","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c9c15d4d8956df8c564f7c210e4dc5b9b820d97a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f3617369fbb30a4d2e54841ab8e92ca4fa211e56","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98820","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98820 — In the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQF_USE_SCHED when t…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nblk-mq: set RQF_USE_SCHED when the operation is known\n\nThe cached requests are allocated for one operation but can be handed\nout for another. A passthrough command has RQF_USE_SCHED cleared, so\nusing those flags for a subsequent re…","indicators":{"cves":["CVE-2026-98820"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.240Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/2c47ebc27fa72078e26177cd458cdaf3006a9685","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/790730e4d95de8356a573d4b4864486bba731863","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ab6c756f28c741d704a7c3e04814bfc3adf6f818","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98821","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98821 — In the Linux kernel, the following vulnerability has been resolved: block: reject polled dio with us…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nblock: reject polled dio with user integrity metadata\n\nIOCB_HAS_METADATA leaves iocb->private as a uio_meta, while\niocb_bio_iopoll() expects a bio. Since 2729a60bbfb9, metadata I/O\nalways uses __blkdev_direct_IO(), which never publ…","indicators":{"cves":["CVE-2026-98821"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.337Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/2a42e6fe1293f2e2d579c9fe5bbab056dd8b880e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c97ef13ad96be0e08af38dfa2ed40cded0b53e1b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd33c03cefccdfcb223e9e6262643d64f8c1ae20","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98822","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98822 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prevent AP VLAN…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: prevent AP VLAN tx from other interfaces\n\nSince the station lookup was factored out of ieee80211_build_hdr(),\nieee80211_lookup_ra_sta() uses sta_info_get_bss() for all AP and AP VLAN\nframes, not only for control por…","indicators":{"cves":["CVE-2026-98822"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.437Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/7f93ca31f7fd9b42e7d692f59514436d448ac908","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88e96d902efeefbffc34450969f40dc61a0c8a42","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ad61b9a5febb42e4b96df8d30ad76ddc36dda9d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fd875e24e8f2b202e3636b3ef8e6060874eca0e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98823","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98823 — In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: preserve hidden-group beacon IE ownership\n\nA hidden-group probe-response entry borrows its beacon IEs from the\ngroup's beacon entry. cfg80211_update_assoc_bss_entry() can pass such\nan entry to cfg80211_update_known_…","indicators":{"cves":["CVE-2026-98823"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.533Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/49b66110a08e4f926f6393e938f226de2750a08b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5f27581c176f84b52ec0ab9be7b500c10667ef60","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cc45f313d85533d647ce619326302aad6f797c14","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd7973a4130b0862be38d7e08cc0e874b3d99967","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98824","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98824 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX stat…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: validate TX status rate metadata\n\nminstrel_ht_tx_status() converts the HT/VHT rate reported in a TX status\ninto a group and rate index and uses those to index the minstrel_ht rate\ntables.  The existing validation on…","indicators":{"cves":["CVE-2026-98824"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.630Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/6bdcdb31318c10e6369cff8e5b32c37397e98091","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b1961a61ab6fbe11f16f7f9b64c57a9908c6c3a8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98825","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98825 — In the Linux kernel, the following vulnerability has been resolved: rtc: mpfs: fix unchecked devm_cl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()\n\ndevm_clk_get(&pdev->dev, \"rtcref\")'s return value was passed straight\ninto clk_get_rate() without checking it for an error first, unlike the\n\"rtc\" clock a few lines…","indicators":{"cves":["CVE-2026-98825"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.720Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/74dc7c52946e3d47c40edd0875adb7cc15937066","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8a03f8422fa08eed335c51bccb612a3d81739ff2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ac41b05d15db3134e839148290d67415ee0bdb58","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cfd70c9b19846c524f2b6195a7484bdf22071ccf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98826","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98826 — In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Fix clock provider u…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: ac100: Fix clock provider use-after-free on probe failure\n\nac100_rtc_register_clks() registers the RTC-32k clock with\nclk_hw_register_fixed_rate() and the clock provider with\nof_clk_add_hw_provider(). Neither is device managed…","indicators":{"cves":["CVE-2026-98826"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.823Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/12bcd20d76703ee2baf52224d287b7fea096b12f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/55ca60ba336632349f7c4585d22ba74ae355b7ce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9cff19ddd7f90c1f572a0f83cfc41de8f8dcbcd8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fcf0b58e976e83adf246b014518e49c662b96f5e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98827","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98827 — In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: bound TX aggreg…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE\n\n__hif_usb_tx() dequeues up to MAX_TX_AGGR_NUM (20) frames into a\nsingle tx_buf of MAX_TX_BUF_SIZE (32768) bytes, limiting the batch\nby record count but never by cumulative b…","indicators":{"cves":["CVE-2026-98827"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:36.937Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/345ce265cf604e84b5b560c21beaf4c6f269ab14","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aeaca27c1db3106967ffbb2b517d98c835f6d500","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c18882768a0fe253c70986c5fe66d9241570fbc4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e73a619f91b6cfec47bc1a94aea28df6849e5be3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98828","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98828 — In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI co…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: reject short WMI command responses\n\nath9k_wmi_rsp_callback() removes the validated WMI header and copies\nthe number of bytes expected by the waiting command into its response\nbuffer. A device response shorter than that…","indicators":{"cves":["CVE-2026-98828"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.043Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/03ef61d05aa26022327f971b790f07e6bf6e35d6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/93ce8ea70451e800601bc9444aa33043de15d67b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a3b0137c855a61371d9cf9993b8bcc33c9798202","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e0c21130c1c7791ba73b19a3a9ea767c8cd43745","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98829","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98829 — In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop oversized f…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: drop oversized fragments to avoid extra_len overflow\n\nIn ieee80211_rx_h_defragment(), fragment payloads are accumulated into\nentry->extra_len as subsequent fragments arrive:\n\n        entry->extra_len += rx->skb->len…","indicators":{"cves":["CVE-2026-98829"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.140Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/5e4f3509793b4db2c0835340224743db680e861f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/870b8cb9baa9bd859deceb33ae158011e6ba2360","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9338b2dea74cb0fc80a4c958b68e687610ba2261","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98830","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98830 — In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read len…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: validate MIB read length before copying to caller\n\nwfx_hif_read_mib() copies reply->length bytes from the firmware\nresponse into the caller-provided buffer without checking that\nreply->length does not exceed val_len. A f…","indicators":{"cves":["CVE-2026-98830"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.250Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/02886c18a340da59df57365f29009e1258bfe333","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/71d140099165de03128c00dd129f1eab21c6a3c4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7acb36fd60a3e7b858f12e69a919c3609b281408","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ce67ebe9d8629776ce38e6995ae72fb903c828db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98831","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98831 — In the Linux kernel, the following vulnerability has been resolved: of/overlay: don't leak fragment…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nof/overlay: don't leak fragment references when changeset init fails\n\ninit_overlay_changeset() stores the number of initialized fragments\nin ovcs->count only on full success. When find_target() or the\n__symbols__ lookup fails partw…","indicators":{"cves":["CVE-2026-98831"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.347Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/1d62f0f2bc7edb12ed09f71203df0e47fa4efca4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/3a23fb158ba517b77a2e5258263bdfdaa480f758","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7a46f1917b320cc8762183b802301da02a191b6a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/894573e2fdaeb1b15030b7eebc22615edf28a6cd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98832","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98832 — In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in bl…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: save IRQ state in blkg_tryget_closest()\n\nbio_set_dev() associates the bio with a blkg through bio_associate_blkg().\nIf the blkg lookup misses, blkg_tryget_closest() takes q->queue_lock with\nspin_lock_irq() and releases…","indicators":{"cves":["CVE-2026-98832"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.443Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/327c428ba79b13e4cc5253333a9d5c0aa5579bdf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9fcf4317384ce6758c3127a6e8914c54cbb9c8cc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98833","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98833 — In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() wi…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: core: call _get_device() with the master MTD\n\n__get_mtd_device() calls the master's _get_device() callback with mtd,\nwhich may be a partition. __put_mtd_device() passes the master.\n\nThis breaks gluebi partitions because gluebi…","indicators":{"cves":["CVE-2026-98833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.537Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/12b31d1acd20b3185bb5f0748db0cf6874c8e9d1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/95c8f36293c22d450c371167ad4f9a5bbadc7539","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dc482a281a19a7d7e91ad1b2d551bb301c54d0e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f971f1c63cf71579258360a12bd185bc1cd1a043","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98834","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98834 — In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: core: avoid double-free of OTP NVMEM device\n\nIf factory OTP setup fails after the user OTP NVMEM device has been\nregistered, mtd_otp_nvmem_add() unregisters the user device but leaves\nmtd->otp_user_nvmem set. On an error, the…","indicators":{"cves":["CVE-2026-98834"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.633Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/26300879cd8e4612dce66bb8f6ff7cd35fcf3e59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cecf007418b93a2cbc94269e07fe2fb28f54d8fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98835","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98835 — In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Fix a…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: accel: kionix-kx022a: Fix array boundary check\n\nThe driver performs a sanity check for an array size, when converting a\nregister value to an array index. The check incorrectly accepts the\nsizeof(array) as a last index, when la…","indicators":{"cves":["CVE-2026-98835"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.730Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0e65412aee4f651d2c9785f542a13e4b44002a75","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/22d377178de281d21ddf908d03a8e9fde3339d9f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4c73c1859fa64509aae7e23a6dbd2d5c8a64c05d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/87746be179dca4d94d73d5a323a39a87bb2e90fc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98837","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98837 — In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the inpu…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: unregister the input device when probe fails\n\nsetup_card() registers the input device, whose name and phys point into\nstruct snd_usb_caiaqdev, and then goes on to snd_card_register() and\nsnd_usb_caiaq_control_init(). I…","indicators":{"cves":["CVE-2026-98837"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:37.943Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0b7bd20f6379bc5e431fd74d866390f5b5b63f3c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2e5a413cc2a489c9427ecd3d73ad764bfb0c7103","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/84727facd8506140cd04f2b0a8b1c4ddeac41cea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/850810c12686f80cdf7530f4f21e0157d904f739","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98839","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98839 — In the Linux kernel, the following vulnerability has been resolved: vt: selection: Fix unsigned unde…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()\n\nIn paste_selection(), the loop copies min_t(unsigned int,\nvc_sel.buf_len - pasted,tty->receive_room) bytes per iteration into\ntty_ldisc_receive…","indicators":{"cves":["CVE-2026-98839"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.170Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/037d7e3ca5c593092f4b0d471eb869a85cbddde0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/39495ef5d6f8019e62d65807f217a7ca8232727a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/619c6d7dd76fff15a9714fbf02ce299b737f01a2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98840","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98840 — In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload vc pointer bef…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF\n\nThe reload of 'vc' added by commit 8fb9ea65c9d1 (\"vc_screen: reload load\nof struct vc_data pointer in vcs_write() to avoid UAF\") sits after the\n'if (ret)' bl…","indicators":{"cves":["CVE-2026-98840"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.293Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/1485a3dd97ab1af2605243cabe6b604546d46dd1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/226bd5603371cd9f6642cbb9e9a677f445de3530","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/233a2e190b12884d186027d0b86d43a48799b69c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9dfcadc5e003fb250dd471db90144bd5366140e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98841","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98841 — In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driver_data b…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: vmgenid: set driver_data before registering notification handlers\n\nBoth probe paths register their notification handler before assigning\ndriver_data, which the handler dereferences.\n\nIn the devicetree path, the notification I…","indicators":{"cves":["CVE-2026-98841"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.417Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/538fe5efaa9704ad820ba34b4f9df135ca873d79","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7a1e8daeaa466c6aaffa223e1afe9cfeece0dd47","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8f42954ad8bf9bdbf574f2c437ad30cb2601f401","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9f8139c6145cf17d690d6c414d43b4c0bef632fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98842","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98842 — In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmodule: fix lost error code from codetag_load_module()\n\nIf codetag_load_module() fails, err is not set to reflect the failure\nand load_module() returns 0 after the module has been torn down.\n\nAlso, if the module is a livepatch, mod…","indicators":{"cves":["CVE-2026-98842"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.527Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/258310d59a82ea4854bfd9138682bbaac1153b19","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/bfc721eef5c13704efe6864c7da2ad4b0d75f60a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c79cf15eb35a4c703bf18f8c33c47e80dd660f8e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98843","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98843 — In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps fo…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: zero gaps in read-gaps folio to avoid writing back stale data\n\nnetfs_read_gaps() leaves gaps around a streaming write's dirty region\nunread on the server side, so a short/EOF response there left stale\nfolio content that late…","indicators":{"cves":["CVE-2026-98843"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.623Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/2a62fe628a877c249c8286b157ee99d82840d9dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/512eaf01ffabf4258e945016b50df5aed940b705","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8db55c5cd831a786a1a2a2d391aa80354535a353","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98844","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98844 — In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: clear post-EOF pagecache when extending a file via write\n\nFix netfs to erase the contents of a hole created after the EOF by an\nordinary write if dirty data has been previously left there by writes\nthrough an mmapped region.…","indicators":{"cves":["CVE-2026-98844"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.720Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/69bf14300b50631e7c2271289d347bbd1b19a06c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/98f6a4589e0f5f6cf819b8dd45605efc481c06ce","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a7036a73671fc83d299bc770710fe996d9fef9ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f8f7d86b3537e885ee620898a38b749fba8a8456","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98845","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98845 — In the Linux kernel, the following vulnerability has been resolved: tpm: Disable TPM on null key nam…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntpm: Disable TPM on null key name mismatch\n\nThe null key name check exists to protect against TPM reset attacks, so\na mismatch should stop the device from serving further requests.\nCurrently it does not disable the chip when it fin…","indicators":{"cves":["CVE-2026-98845"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.833Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/015fb29a748342a186f37b602ac70017098c8251","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/96c46c75b0d470b4204f9fe1bdb075cd2ebaebfa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a03d0c64cd827a622578623a78defd66b6593b82","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f6599d8830fe7ddab7334cc17846fd9ac9a7fa50","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98846","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98846 — In the Linux kernel, the following vulnerability has been resolved: sctp: check RCV_SHUTDOWN after t…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: check RCV_SHUTDOWN after the sendmsg connect wait\n\nsctp_wait_for_connect() drops the socket lock while it sleeps. An\nout-of-the-blue ABORT can then be processed from the socket backlog and\nunlink the association. If a concurr…","indicators":{"cves":["CVE-2026-98846"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:38.947Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/222c41e0f50f1d5028be9baf0e1dcfc0bfa7f669","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4f1da630d13de0370e2f6361f961f1c8b384af1c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e701345d886e831fb593a0870d69c8c5de6fc938","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e8f972b1759d26bbefe4c524caae1ed7c8a593bd","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98847","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98847 — In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: spear: initialize IRQ state before requesting alarm IRQ\n\ndevm_request_irq() enables the interrupt before it returns, so the handler\nmay run while probe is still initializing the device. Initialize the MMIO\naddress and spinlock…","indicators":{"cves":["CVE-2026-98847"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.047Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/055ef5ce9f67a6a3a1363fa663007f8196cc0fb8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c02aa67ea34a826c2cb1aa65d77cf32fafb7eec3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cb6d6a7fbff0414b9eed505d17687b4b7e38fee8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e0cabda9b6f4dd276c55c40bdbb251e8507ae60e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98848","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98848 — In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before a…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: ac100: Assign .num before accessing .hws\n\nCommit f316cdff8d67 (\"clk: Annotate struct clk_hw_onecell_data with\n__counted_by\") annotated the hws member of 'struct clk_hw_onecell_data'\nwith __counted_by, which informs the bounds…","indicators":{"cves":["CVE-2026-98848"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.163Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/160619b38707241e22569f9c983a4b3d0890996a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6a4117eee82dd85f11bf898bf66026764011eeb6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6bb55381daf1a1bed0657189a1396e7467712525","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/ad1bf77039cba83373bf1eff3784655e3e3ed2ab","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98849","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98849 — In the Linux kernel, the following vulnerability has been resolved: pfcp: fix socket lifetime on net…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\npfcp: fix socket lifetime on netdevice registration failure\n\npfcp_newlink() creates the UDP socket before register_netdevice().\nIf registration fails after pfcp_dev_init() succeeds, the core calls\npfcp_dev_uninit(), which releases…","indicators":{"cves":["CVE-2026-98849"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.283Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0f17d2e3dd9cda3ee6d94033d5e5489af168920d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2cee3603ec1d9b5ec7f2121ea3efe9488e906f46","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/4b8ce1686dea1a10805a0807bf492409b0300ee1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dcb8f6a79c3360a440c399d85df465a6e59351f1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98850","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98850 — In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TX_RING byte…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/packet: prevent TX_RING byte count overflow\n\ntpacket_snd() drains every SEND_REQUEST frame in a TX ring and adds\neach valid packet length to the signed int len_sum. Userspace can\nrecycle completed frames concurrently, so a sing…","indicators":{"cves":["CVE-2026-98850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.390Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/2cf81fc9505b148b1b70068303ea6ea4b1212403","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/69ca64bbb528898916f309552053c32a04a36ebc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/9fd63d284e251332f4874ef9023cde472f315f86","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/be12b221c0301111eeb023be04add3c6ad7c21fe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98851","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98851 — In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: dro…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_flow_offload: drop flowtable reference on init error path\n\nnft_flow_offload_init() bumps the flowtable use count with\nnft_use_inc() before calling nf_ct_netns_get().  When the latter\nfails, the error is returned as-i…","indicators":{"cves":["CVE-2026-98851"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.490Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/4cd378423a33194a773c267fc58606d28fce95cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/64ac0cb574c740bf723affb79b646eeba920db6b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/747928b5d4ff8c8de55138a54c13980e4bb88578","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c5f91098edee98c015f78488460a0609e62582a5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98852","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98852 — In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detectio…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: extend IPv6 exthdr detection of tunneled packets\n\nCommit c4336a07eb6b (\"net: correctly handle tunneled traffic on IPV6_CSUM\nGSO fallback\") split skb_gso_has_extension_hdr() into mutually exclusive\nbranches on skb->encapsulatio…","indicators":{"cves":["CVE-2026-98852"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.593Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/44ba9dc568c878b699d05e7cf699572dc9df4b59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5f0764cb1c81a9712bce605d38efe6d844a70b29","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aa480f05aed7a9eee87d4a6fc90647fe9679c670","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/cabacdf98e09eb74599c4d97d7bd7fd659598fb7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98853","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98853 — In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gso: limit recursive IP-in-IP segmentation\n\nIP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segment()\nfor each nested IP header. encap_level tracks header bytes, not callback\ndepth, so a deep chain can exhaust the ker…","indicators":{"cves":["CVE-2026-98853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.733Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/006c8b834aed8b02bd8fb9fb05e9e7ead37d1763","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c949646c900e879afce47df1b607fa320eb63bf2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98854","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98854 — In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positiv…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nof/overlay: only treat a positive changeset id as registered\n\nof_overlay_fdt_apply() stores the idr_alloc() return value in\novcs->id before checking it. On failure the stored id is negative,\nfree_overlay_changeset()'s \"if (ovcs->id…","indicators":{"cves":["CVE-2026-98854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.833Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0d1525fdcd3355672b7485d61e55df6824ab5ad1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/44081d708b5b885487bac792db78324b7b4c267d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c08a54df9d33dcd6ff089adc9434b2c008af3a39","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/c875407c34dadaef0599834ad9c815f4c9f50d15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98855","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98855 — In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on dead…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nof/overlay: put property on deadprops only after changeset add succeeds\n\nadd_changeset_property() links a new property of a not-yet-live\ntarget node into the node's deadprops list before handing it to\nof_changeset_add_property(). I…","indicators":{"cves":["CVE-2026-98855"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:39.937Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/5857035a3b53a4e7b5a0d5a740189901ece0b079","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7dc6a769153c0457077a0da4888a00f61e66de15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/814f2da6995772c07a7c9c2cc6028b6e3f3ecc9c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/d5151496a0a2b19c9c0c7b0ebf86b3de55a8fa3a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98856","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98856 — In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes wh…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nkprobes: Skip disarmed probes when checking optkprobe overlap\n\nOn x86, an optkprobe at A replaces five bytes with a jump. If a disabled\nprobe B is at A+2, get_optimized_kprobe() stops at B when arming a new\nprobe C at A+4. It leave…","indicators":{"cves":["CVE-2026-98856"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.050Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/526fac219e8b7d3369b43026bd0a1df51b811cd4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6745fa65f4115045431c0c15610e876855a04625","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7a39c732a22ec4a369af9e19fbe3d666ec83eec4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/985a568171e7bdba6dcde3420d0e5bb515813457","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98857","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98857 — In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: bound LBLCR and LBLC cache growth\n\nip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for\nevery previously unseen destination address. The table max_size only\ntells the periodic collector to reclaim entries after the…","indicators":{"cves":["CVE-2026-98857"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.150Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/16c83c047ecfaf226ad81d45d77fa11a3184d0e4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/2a3c3de660f96865f303fd25f1285f2ffbfd521d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/31028d7b970962fbeda1e9131405c76551094300","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/6316d17324bd4ca400c26adb7b656c6e3447c209","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98858","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98858 — In the Linux kernel, the following vulnerability has been resolved: io_uring: fix task_work add use-…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix task_work add use-after-free with SQPOLL\n\nFor SQPOLL, the sqpoll thread runs task_work off its own list and\ndoesn't need to be told about it, so it can pop and complete a request\nas soon as mpscq_push() has published…","indicators":{"cves":["CVE-2026-98858"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.257Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/395b25968fe854d4efaa19a8e9b7a5b6d1b3eea3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/42b3332efacfd2140be4cd0dedad4fb96b8ae90e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/891bd8335a0de3bb15c3b797ce3026bbb0dbef6c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a92193c91e8839fe5fc209616ea95465ae4b919d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98859","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98859 — In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the releas…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: multitouch: stop the release timer from being rearmed on remove\n\nmt_remove() quiesces the sticky-finger timer before stopping the\nhardware:\n\n    timer_delete_sync(&td->release_timer);\n\n    sysfs_remove_group(&hdev->dev.kobj, &…","indicators":{"cves":["CVE-2026-98859"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.363Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/0c19a6c1d25fd5ed66d1f80dc6f6e56cc1f0a787","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/1f1bd9a3117f082eb891c0986c4f0e04cd974c9a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/5acb2dace582f061aab5e14c399ac9480315f44b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/a0125ca86e405b8a704e96157a6c10ca51087652","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98860","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98860 — In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t w…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nHID: bpf: cast size to ssize_t when checking hid_bpf_hw_request\n\nAs reported by Sashiko:\nIf a transport driver encounters a hardware error and returns a negative\nerror code such as -EPIPE, ret is implicitly promoted to size_t when…","indicators":{"cves":["CVE-2026-98860"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.470Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/3afefbfe55c2a8a0c4bdf6f4cc1f773da120027c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/8b85ef0f561039e249c3f883c5280a1449c6dbee","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/97be6396817bd3b11d06239010d27902940bfaa9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f9f808227554b2c116fd07dd2328ecd74ea3f411","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98861","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98861 — In the Linux kernel, the following vulnerability has been resolved: fprobe: Use guard(rcu_sched_notr…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()\n\nunregister_fprobe() and unregister_fprobe_async() (used by BPF\nkprobe-multi) rely on standard RCU grace periods (synchronize_rcu()\nand call_rcu()) to wait until in-f…","indicators":{"cves":["CVE-2026-98861"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.573Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/a85d0f00671b4d4527317c10ba018680f7d8d673","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/dd4a0d4993633b45470abf6da4ea0ca563402245","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/e0a6249190402a28f1e2925a81acf573157d55ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98862","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98862 — In the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\naudit: fix exe mark UAF in kill_rules()\n\nkill_rules() removes mixed AUDIT_DIR and AUDIT_EXE rules when an audit\ntree is pruned. It drops entry->rule.exe before removing the rule from\nthe RCU-visible filter lists.\n\nAfter a rule has…","indicators":{"cves":["CVE-2026-98862"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.677Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/304960900991157e6883bdf0b39782b690545ee8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/88633025f20ba9c32ccdb3efc86eafdf98cb825c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/aa650d87a498844060eecb1d336f4d46f4d1b0b3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/f2cc5462b78559c7628a9f8ac9a9592e7783183a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98863","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98863 — In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STA…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails\n\nRe-pend GET_NESTED_STATE_PAGES before exiting to userspace if getting the\nnested pages fails in the KVM_RUN path.  If userspace re-runs the vCPU, and\nvmcs02 hold…","indicators":{"cves":["CVE-2026-98863"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.780Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/10180a277549339020b08000206092c07e0bff5a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/525694a6021ec6c8f7ce1f38acdf2dd77698fec1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/942192dbcd3a06695ef6b31cf10a41a21cf014d8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98864","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98864 — In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DIS…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task\n\nebf1ccff79c4 (\"sched_ext: Fix ops.dequeue() semantics\") moved the final\nops_state store in scx_dispatch_enqueue() after the DSQ unlock so that the\ncustody update…","indicators":{"cves":["CVE-2026-98864"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.877Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/43457bf6550044c40bd6d3fcdf9ea66f5a55d139","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/7de9a6fb44eae4f05e68c805d58b9c618815adfa","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98865","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98865 — In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsched_ext: Don't run ops.dequeue() with a DSQ lock held\n\nops.dequeue() is invoked with the source user DSQ's lock still held on\nthe consume and move paths (scx_consume_dispatch_q(),\nmove_task_between_dsqs()). A BPF scheduler which…","indicators":{"cves":["CVE-2026-98865"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:40.973Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/cb86607ada73185f321baa7f9d94a08a3a40bbf5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/fe499ae9da46e297f578d4346c4c8e338c3118db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-98866","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-98866 — In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_stru…","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsched/cache: Introduce task_struct->sched_cache_grp to fix UAF\n\nAdd a sched_cache_grp pointer to task_struct so that scheduler code\ncan access the cache group directly via the task, without going\nthrough mm->sched_cache_grp.  This…","indicators":{"cves":["CVE-2026-98866"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T16:17:41.117Z","fetchedAt":"2026-10-20T03:01:48.462Z","references":[{"url":"https://git.kernel.org/stable/c/9436130e6da72af63289a4acb3aa0c1df07a3928","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"},{"url":"https://git.kernel.org/stable/c/b636fef85bda7d1bab9c0a45067ab1508d79d946","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107618","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107618 — `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-…","description":"`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected. A repository administrator who visited a malicious page could have the topics of their repository changed. No other repos…","indicators":{"cves":["CVE-2026-107618"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T19:16:32.807Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://blog.gitea.com/release-of-28.2.0/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"other"},{"url":"https://github.com/go-gitea/gitea/pull/39839","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/pull/39847","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/releases/tag/v28.2.0","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"},{"url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-4jmf-h2cm-hg7w","label":"88ee5874-cf24-4952-aea0-31affedb7ff2","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112111","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112111 — The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id at…","description":"The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emits the id attribute value into an unquoted HTML attribute. esc_attr() is applied, but it does not enco…","indicators":{"cves":["CVE-2026-112111"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T23:16:56.583Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/TheWebShop/bootstrap-shortcodes/commit/c26659ccb6ddb871c7dee1b77cb81cad63e7a75b","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/TheWebShop/bootstrap-shortcodes/releases/tag/3.4.6","label":"cve@mitre.org","domainType":"primary"},{"url":"https://plugins.trac.wordpress.org/browser/bootstrap-shortcodes/tags/3.4.4/inc/bs_tabs.php#L84","label":"cve@mitre.org","domainType":"other"},{"url":"https://wordpress.org/plugins/bootstrap-shortcodes/","label":"cve@mitre.org","domainType":"other"},{"url":"https://wordpress.org/plugins/bootstrap-shortcodes/#developers","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112112","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112112 — An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established…","description":"An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD fai…","indicators":{"cves":["CVE-2026-112112"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T23:16:56.767Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://gitlab.nic.cz/labs/bird/-/blob/v2.20.0/nest/rt-table.c#L2686","label":"cve@mitre.org","domainType":"other"},{"url":"https://gitlab.nic.cz/labs/bird/-/blob/v3.4.0/nest/rt-table.c#L4518","label":"cve@mitre.org","domainType":"other"},{"url":"https://gitlab.nic.cz/labs/bird/-/commit/7cf75587b6f38b87849fe192bf5dfd124b7702bc","label":"cve@mitre.org","domainType":"other"},{"url":"https://www.rfc-editor.org/rfc/rfc8956.html#section-5","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102503","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102503 — Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /l…","description":"Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass…","indicators":{"cves":["CVE-2026-102503"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T03:16:58.193Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/google/sam/commit/433bc99d2a2c10071167bf22acc2c930a12e64e1","label":"cve-coordination@google.com","domainType":"primary"},{"url":"https://github.com/google/sam/releases/tag/v0.1.0-alpha.3","label":"cve-coordination@google.com","domainType":"primary"},{"url":"https://github.com/google/sam/security/advisories/GHSA-r6hp-67wp-c7jx","label":"cve-coordination@google.com","domainType":"primary"},{"url":"https://github.com/google/agentmesh/security/advisories/GHSA-r6hp-67wp-c7jx","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-103091","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103091 — Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188)…","description":"Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in mcp_service.go) and OIDC registration flow (GET /info and POST /register in internal/controlplane/server.go) in Google OSS Agent Mesh (SAM) versions 0.1.0…","indicators":{"cves":["CVE-2026-103091"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T03:16:58.377Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/google/sam/releases/tag/v0.1.0-alpha.9","label":"cve-coordination@google.com","domainType":"primary"},{"url":"https://github.com/google/sam/security/advisories/GHSA-cgmg-9xf6-rrgw","label":"cve-coordination@google.com","domainType":"primary"},{"url":"https://github.com/google/agentmesh/security/advisories/GHSA-cgmg-9xf6-rrgw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-108120","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108120 — Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs f…","description":"Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of \nkoozali's SME Server version 11.0rc1-215 allowing an unauthenticated \nattacker to access files outside of the intended directory, leading to \nexfiltration of files located outside the…","indicators":{"cves":["CVE-2026-108120"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:21.097Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://digitalcanion.com/en/security-research/#vendor=koozali","label":"vulnerability@ncsc.ch","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108121","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108121 — Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functional…","description":"Brian Mariani from DigitalCanion SA has discovered a  vulnerability in the domain creation functionality of koozali's \nSME Server version 11.0rc1-215, allowing an attacker with high privileges \nto inject reserved Apache configuration directives, corrupting \nhttpd.conf and preventing Apache from star…","indicators":{"cves":["CVE-2026-108121"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:17:22.163Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://digitalcanion.com/en/security-research/#vendor=koozali","label":"vulnerability@ncsc.ch","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112161","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112161 — MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first veri…","description":"MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell se…","indicators":{"cves":["CVE-2026-112161"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:08.097Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/lack-integrity-checks-mobateks-mobaxterm","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112178","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112178 — MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The author…","description":"MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted any attribute or object carrying one of the user's sharing groups without verifying the distribution level, and denied the owning organisation access to proposals on its own org…","indicators":{"cves":["CVE-2026-112178"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:08.240Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/MISP/MISP/commit/9c5af321f","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112179","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112179 — In MISP, the event synchronization process contained a logic error in the preparation of event repor…","description":"In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. The filtering of non-exportable tags was applied only once after the iteration over all reports, rather than to each individual report.\n\nAs a result:\n\n- All reports except the last…","indicators":{"cves":["CVE-2026-112179"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:08.457Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/MISP/MISP/commit/0be4564a9","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112180","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112180 — MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, sever…","description":"MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated records are not removed from the database, leaving them as orphaned entries. The affected record types include event report tags, event graph entries, proposal (shadow attribute) correla…","indicators":{"cves":["CVE-2026-112180"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:08.660Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/MISP/MISP/commit/5f78634af","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-13695","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-13695 — SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec applic…","description":"SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/ap_Login.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,…","indicators":{"cves":["CVE-2026-13695"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T09:17:08.880Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-integratec-application","label":"cve-coordination@incibe.es","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108762","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108762 — Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin se…","description":"Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.4.\n\n\n\nUsers are…","indicators":{"cves":["CVE-2026-108762"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:44.313Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/6n1o1t14ssc5x4dg18hlv30crwbhwdpd","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/13","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108764","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108764 — Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job servi…","description":"Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.4.\n\n\n\nUsers are reco…","indicators":{"cves":["CVE-2026-108764"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:44.460Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/m35g1w482qbznocjkp2vl6bm33dcyb47","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/14","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108766","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108766 — Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin service…","description":"Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.4.\n\n\n\nUsers are recom…","indicators":{"cves":["CVE-2026-108766"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:44.587Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/50447hzwyz8r9xwtfbylsphv4ylq9yhj","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/15","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108771","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108771 — Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apach…","description":"Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\n\n\n\nThis issue affects Apache Kylin: fro…","indicators":{"cves":["CVE-2026-108771"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:44.690Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/d77s7dh3bxf02l4rjbgb6807g605zskx","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/16","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108780","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108780 — Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, u…","description":"Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network.\n\n\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.4.\n\n\n\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.","indicators":{"cves":["CVE-2026-108780"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:44.913Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/vyc83rb5t0f4nyvn1dzggshcqdqf9lj0","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/18","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108823","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108823 — Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin.…","description":"Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are exposed to public network, which is uncommon.\n\n\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.4.\n\n\n\nUsers are recommended to upgrade to version 5…","indicators":{"cves":["CVE-2026-108823"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:45.013Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/bhcvh3oxcqcjklxfr2mn1j3f7pzxqz4b","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/19","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108833","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108833 — Default startup profile miss security settings in Apache Kylin. Any deployment has security setting…","description":"Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact.\n\n\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.4.\n\n\n\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.","indicators":{"cves":["CVE-2026-108833"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:45.123Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/lqb36tsyp3fdsg5x4qvz4fy3hkzcr2wz","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/20","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-108837","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-108837 — Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacke…","description":"Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API maybe used to cause computed-column resource exhaustion.\n\n\n\nThis issue affects Apache Kylin: from 4.0.0 through 5.0.4.\n\n\n\nUsers are recommended to upgr…","indicators":{"cves":["CVE-2026-108837"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:45.220Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread.html/qgpgkx6zh37tlys28qlysrffo6pz614v","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/21","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112183","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112183 — MISP contains a CSS injection vulnerability in the remote event preview feature. When a user preview…","description":"MISP contains a CSS injection vulnerability in the remote event preview feature. When a user previews an event from a linked MISP server, the colour value associated with each remote tag is written directly into an inline CSS style attribute without sufficient validation. Although HTML entity encodi…","indicators":{"cves":["CVE-2026-112183"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:46.970Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/MISP/MISP/commit/91323b517","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112184","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112184 — MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface.…","description":"MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules service are rendered as raw HTML form labels on the workflow module page without output encoding. An attacker who can influence the parameter names report…","indicators":{"cves":["CVE-2026-112184"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:47.210Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/MISP/MISP/commit/813a48b2b","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112188","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112188 — MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated u…","description":"MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted.\n\nThe settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name (such…","indicators":{"cves":["CVE-2026-112188"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:47.413Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/MISP/MISP/commit/30b849102","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112192","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112192 — MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds mo…","description":"MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and cli_only flags that a module declares in its own configuration metadata.\n\nAs a result:\n\n- A module that marks a setting (such as a…","indicators":{"cves":["CVE-2026-112192"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:47.563Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/MISP/MISP/commit/6c02f0f5c","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-64945","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-64945 — A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question oper…","description":"A vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\nThe question operation controller gates hide/show operations on the wrong permission check result (the unpin permission instead of the hide permission), so in custom role configurations that separate these permiss…","indicators":{"cves":["CVE-2026-64945"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:48.280Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/3wdqq1vp449bty5ovs02f0894km07wmz","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/24","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-67249","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-67249 — A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A verification co…","description":"A vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\nA verification code issued for one email-based workflow could be accepted by another sensitive workflow because the code purpose was not properly enforced.\n\n\nUsers are recommended to upgrade to version 2.0.3, whic…","indicators":{"cves":["CVE-2026-67249"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:48.397Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/kbdgj9vzd24zb4r2d9ydqyr6f70rpg0v","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/25","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-68482","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-68482 — Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.…","description":"Missing Authorization vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\nAn unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks.\n\n\nUsers are recommended to upgra…","indicators":{"cves":["CVE-2026-68482","CVE-2026-71563"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:48.510Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/m2tbvdv12hmr9sw6ft53rjnww8hqzds0","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/26","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"},{"url":"https://lists.apache.org/thread/msodd7g2r6xdn9wpkpdp04m9g1jb2xtl","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/27","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-76994","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-76994 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issu…","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\nUnauthenticated attackers could obtain metadata associated with hidden questions through public answer profiles.\n\n\nUsers are recommended to upgrade to versi…","indicators":{"cves":["CVE-2026-76994"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:48.983Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/b9whow167cr0lkhqk6xzk0c2bb86srhy","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/28","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79613","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79613 — vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated att…","description":"vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\n\n\nUnauthenticated attackers could access comments associated with non-public content through public user profiles.\n\n\n\nUsers are recommended to upgrade to version 2.0.3, which fixes the issue.","indicators":{"cves":["CVE-2026-79613"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:49.093Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/grsm88msk5psc4r5jy5fqmlb5g6p7797","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/29","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79620","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79620 — Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue af…","description":"Exposure of sensitive information through data queries vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\n\n\nAn improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions.\n\n\n\nUsers are recommended…","indicators":{"cves":["CVE-2026-79620"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:49.213Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/p6oqj9b27o4nppc0kv00rn7yb7n2l6o8","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/30","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79624","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79624 — Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: th…","description":"Insufficient session expiration vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\n\n\nInsufficient session invalidation allowed revoked users to continue accessing known private uploaded files with a stale visit token.\n\n\n\nUsers are recommended to upgrade to version 2…","indicators":{"cves":["CVE-2026-79624"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:49.327Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/lpwc1hpnt3fkfwkh00v5j0dvpzqmnoqk","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/31","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-79633","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-79633 — vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorizati…","description":"vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\n\n\nMissing authorization checks allowed authenticated users to perform actions on non-public content they were not permitted to access.\n\n\n\nUsers are recommended to upgrade to version 2.0.3, which fixes the issue.","indicators":{"cves":["CVE-2026-79633"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:49.430Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/m301yrn0fwgr957q8qzfzt8tpjklocv9","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/32","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86589","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86589 — Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affe…","description":"Incorrect implementation of authentication algorithm vulnerability in Apache Answer.\n\n\n\nThis issue affects Apache Answer: through 2.0.2.\n\n\n\nA flaw in the User Center login integration can cause a newly created external user session to omit its external identity, allowing subsequent requests to bypas…","indicators":{"cves":["CVE-2026-86589"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:16:49.540Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://lists.apache.org/thread/t8mbzfolzlqz4z5hcwq3v0lnwjqb2tl5","label":"security@apache.org","domainType":"other"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/16/33","label":"af854a3a-2127-422b-91ae-364da2661108","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-71253","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-71253 — Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in…","description":"Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon.\n\n\n\nClassConverter loads & static-initializes an attacker-named class from untrusted JSON.\n\n\n\n\nThis issue affects Apache Johnzon: from 1.0.0 before 2.2.0.\n\n\n\nUsers are recommended to up…","indicators":{"cves":["CVE-2026-71253"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:17:18.540Z","fetchedAt":"2026-10-20T03:01:48.463Z","references":[{"url":"https://github.com/apache/johnzon/commit/91e7b0d21d08d138944e2570691939739422a3d6","label":"security@apache.org","domainType":"primary"},{"url":"https://github.com/apache/johnzon/commit/dd3d00634c746a2173a2518e882e85e8a151bf30","label":"security@apache.org","domainType":"primary"},{"url":"https://lists.apache.org/thread.html/3vgm1yo2sn9yhkvvs9lc4ro01vl3zt68","label":"security@apache.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-8168","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-8168 — Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt al…","description":"Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted SVG file with deeply nested elements.","indicators":{"cves":["CVE-2026-8168"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:17:08.840Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/730501","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/730590","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/730591","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/730892","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/731257","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/733245","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/738811","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/743488","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/748966","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://codereview.qt-project.org/c/qt/qtsvg/+/756512","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"},{"url":"https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-8168:","label":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107081","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107081 — SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJA…","description":"SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System (SLiMS) Bulian 9.8.0 allows any authenticated staff user to…","indicators":{"cves":["CVE-2026-107081"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:01.347Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107081","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/391","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111046","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111046 — FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasMan…","description":"FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early return on !isExtensionActive skips the module-access and manage_settings checks. A low-privileged staff account with module-lev…","indicators":{"cves":["CVE-2026-111046"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.330Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/FOSSBilling/FOSSBilling/commit/7a7a30984b58cd1008a573fc70296a7653d8ae04","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/pull/4184","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/releases/tag/0.8.6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-3g7m-ph2r-jhcx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111053","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111053 — FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the un…","description":"FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/guest/system/template_exists endpoint permits path traversal because templateExists uses Path::join on the attacker-controlled file parameter without rejecting .. sequences or verify…","indicators":{"cves":["CVE-2026-111053","CVE-2026-111056"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:03.487Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/FOSSBilling/FOSSBilling/commit/e6ca7731c6bce406aba11900a4450e89c4ebdb01","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/pull/4221","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/releases/tag/0.8.7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-fm3x-cx5r-wwgp","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/commit/19f41ff0a45874c7362b7732c8f68db84bc59c55","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/pull/4234","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-x4mh-g4pc-wfc5","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-12254","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-12254 — Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Clie…","description":"Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network which already has internet connectivity, the Captive Portal does not close. This allows the possibility of abuse via th…","indicators":{"cves":["CVE-2026-12254"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:17:07.807Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.netskope.com/resources/netskope-resources/netskope-security-advisory-nskpsa-2026-004","label":"psirt@netskope.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-103038","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-103038 — PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of…","description":"PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who ca…","indicators":{"cves":["CVE-2026-103038"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.400Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://fluidattacks.com/advisories/yanderechainsawregurgitationfactory","label":"help@fluidattacks.com","domainType":"other"},{"url":"https://play.google.com/store/apps/details?id=ua.com.streamsoft.pingtools","label":"help@fluidattacks.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107082","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107082 — Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perf…","description":"Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape_string() is applied but the values are concatenated into an unquoted numeric SQL…","indicators":{"cves":["CVE-2026-107082"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:00.543Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107082","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/392","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111063","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111063 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4.","indicators":{"cves":["CVE-2026-111063","CVE-2026-111750"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.237Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/999c356d61e966faffa97b06ab0d0455226d36c5","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-494j-54xm-rwp3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/commit/9b27347e61454d9f8ca2055f4c67a37dee336e83","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-pqxq-w44r-73xw","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111064","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111064 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, kee…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely before sending any request data, consuming server connection capaci…","indicators":{"cves":["CVE-2026-111064"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.377Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/be846822b4b3a5a54b6163e794b42dc06fba54a3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5wr8-gcqf-gqf3","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111065","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111065 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can consequently exhaust the connection pool temporarily until garbage collection resolves the connections. This issue is fixed…","indicators":{"cves":["CVE-2026-111065"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.503Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/9dd8eaf4e31f1237ef2c1574a8c82a739fca5805","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6cjc-53gc-5rqm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111066","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111066 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.1…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart reques…","indicators":{"cves":["CVE-2026-111066"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.637Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/2d94633b7f1b4c1ba07d647b629a8440652b2d09","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9xw5-w5jj-pvcg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111748","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111748 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme for…","indicators":{"cves":["CVE-2026-111748"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:03.877Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/6d4e7b01f9b951aa084a75d7356e907d4ee80411","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-f9xw-jh8m-3mwq","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111749","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111749 — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Hos…","description":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequently have host-only protections stripped from cookies, although i…","indicators":{"cves":["CVE-2026-111749"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:17:04.023Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/6a07c171ef9f3be583e2907dcd1931372efca8d6","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gx76-c99x-2c96","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-55654","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-55654 — A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box…","description":"A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.","indicators":{"cves":["CVE-2025-55654"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.187Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/0ccd2927c7145f5ab0352c5b15f787757b34eb18","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3249","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/116769098607015606","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2025-60480","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-60480 — A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC…","description":"A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.","indicators":{"cves":["CVE-2025-60480"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.480Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/e02d1fd24cdc26acb1b236ab38b3832cffcae21b","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3295","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/117456490628466269","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105810","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105810 — Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi…","description":"Tapo C320WS\nV2.0 contains an authenticated stack-based buffer overflow in the local\nonboarding Wi-Fi configuration path. An authenticated attacker on the\nadjacent network can submit a crafted request containing an oversized encrypted\npassword field, overwrite stack state, and execute commands with r…","indicators":{"cves":["CVE-2026-105810"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:58.903Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://www.tp-link.com/en/support/download/tapo-c320ws/v2/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/download/tapo-c320ws/#Firmware-Release-Notes","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"},{"url":"https://www.tp-link.com/us/support/faq/5351/","label":"f23511db-6c3e-4e32-a477-6aa17d310630","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-107084","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-107084 — Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) a…","description":"Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data…","indicators":{"cves":["CVE-2026-107084"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:16:59.047Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/Primandito/CVE-2026-107084","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/slims/slims9_bulian/issues/394","label":"cve@mitre.org","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-111755","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111755 — follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. Fr…","description":"follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unescaped in sensitiveHeaders. When an application declares a sensitive header whose name contains ^ or | and follows a cros…","indicators":{"cves":["CVE-2026-111755"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:00.260Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/follow-redirects/follow-redirects/commit/080a76d0e125b37bf81717368a61d5dc37aa56c8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.1","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-8r9p-f939-6h3c","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-55644","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-55644 — Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails…","description":"Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing io.element.call://. If an attacker is able to trick the user into opening a maliciously crafted io.element.call:// URL, they are able to load an attacker-contr…","indicators":{"cves":["CVE-2026-55644"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:17:08.007Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/element-hq/element-x-ios/commit/63592e48c1a1e47f75693045efd85a7d4468ea84","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/element-hq/element-x-ios/pull/5515","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/element-hq/element-x-ios/releases/tag/release/26.05.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/element-hq/element-x-ios/security/advisories/GHSA-54w7-rw44-49m7","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2025-60482","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2025-60482 — A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project…","description":"A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.","indicators":{"cves":["CVE-2025-60482"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:03.650Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/gpac/gpac/commit/e02d1fd24cdc26acb1b236ab38b3832cffcae21b","label":"cve@mitre.org","domainType":"primary"},{"url":"https://github.com/gpac/gpac/issues/3297","label":"cve@mitre.org","domainType":"primary"},{"url":"https://infosec.exchange/@sigdevel/117456522954593448","label":"cve@mitre.org","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110672","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110672 — Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a dupl…","description":"Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv.\n\nA quoted key of 24 or more bytes, or one containing a non-ASCII byte or an escape sequence, is decoded into a new scalar. Nothing frees that scalar when the…","indicators":{"cves":["CVE-2026-110672"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:20.753Z","fetchedAt":"2026-10-20T03:01:48.465Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/532b53cf8d2ca5ab6bc24048325566d1f7132425.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110673","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110673 — Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under…","description":"Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag.\n\nWith allow_tags, \"(\" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is n…","indicators":{"cves":["CVE-2026-110673"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:20.877Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/995eb484a9351753e2a8ec3317918b5b4a4e086a.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110674","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110674 — Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowin…","description":"Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv.\n\nWith allow_barekey, which relaxed enables, a bare key containing a non-ASCII byte is stored as UTF-8 but looked up as raw bytes, so a repeated…","indicators":{"cves":["CVE-2026-110674"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.090Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c52037857d6a99d96ebd1ce3e2fa769505f028cf.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-9334","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110675","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110675 — Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys un…","description":"Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv.\n\nWith utf8 and allow_barekey, which relaxed enables, a quoted key is validated as UTF-8 but a bare key's bytes are stored as a UTF-8 flagged string without any check. M…","indicators":{"cves":["CVE-2026-110675"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.210Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c2cd02281b9d6904ca0aff2740154e742abc070c.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110676","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110676 — Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation…","description":"Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum.\n\nWith allow_bignum, a JSON number with a fraction or exponent decodes to a Math::BigFloat, which stores the exponent separately and so decodes cheaply. Enco…","indicators":{"cves":["CVE-2026-110676"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.320Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/996ab96972b967a917536d291947b5f3cf42e960.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110677","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110677 — Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key val…","description":"Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv.\n\nWith dupkeys_as_arrayref, the values of a duplicate object key are collected into a new array. An extra reference is never released, so the array and every…","indicators":{"cves":["CVE-2026-110677"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.437Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/edb13030a708afc2cde0d2629fb6bdd31288ce6c.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110678","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110678 — Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental inpu…","description":"Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse.\n\nThe parser appends each chunk to its buffer. In scalar or list context, it compares max_size with how far it has progressed, not with the buffer length. A chunk that st…","indicators":{"cves":["CVE-2026-110678"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.550Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/d516f296b1714e06b0fb9eaae72f4558ae3d83d6.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110680","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110680 — Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared h…","description":"Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv.\n\nWith canonical, the keys of a tied or threads::shared hash are counted before a second pass collects them for sorting. The encoder uses a fixed 64-en…","indicators":{"cves":["CVE-2026-110680"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.657Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/44c4591cc62ea7f453a0ed931abf24394e1560a1.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110681","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110681 — Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser ob…","description":"Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread.\n\nA parser object holds its callbacks and its incremental parse buffer as raw scalar pointers. When a thread is created, these are copied into the new interpreter unchan…","indicators":{"cves":["CVE-2026-110681"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.767Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c53eefbaa59c344abd4c71762118da04280987e8.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110682","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110682 — Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value…","description":"Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse.\n\nallow_nonref is enabled by default and incr_parse inherits it. A top-level number, true, false or null has no closing delimiter, so the incremental parser decodes…","indicators":{"cves":["CVE-2026-110682"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.880Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/f632d6690d82c14cd2d76d648805325201c52b83.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110684","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110684 — Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects…","description":"Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify.\n\nencode_stringify writes a value in its string form under allow_stringify, under convert_blessed for objects without TO_JSON, and under allow_bign…","indicators":{"cves":["CVE-2026-110684"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:21.990Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/5b15916b5e7841e447664ace51fb50c12d1e0f39.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110685","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110685 — Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its…","description":"Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag.\n\nWith allow_tags, a tagged value's class name and argument array are decoded and passed to the class's THAW method. Both are released only after THAW returns, so a THA…","indicators":{"cves":["CVE-2026-110685"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.097Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/9ab010221c069a7af9ef7463454ecd3b8ace9c58.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110686","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110686 — Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itse…","description":"Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv.\n\nA decode copies the parser's filter_json_object and filter_json_single_key_object callbacks without taking references to them. A filter callback that removes the last…","indicators":{"cves":["CVE-2026-110686"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.200Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/c3e7e3c5b0b72d82b072c6a7cfb8c34cec4c7ea2.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110687","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110687 — Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical…","description":"Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp.\n\ncanonical sorts keys by UTF-16 code units. When any key in a hash is UTF-8 flagged, every key is decoded as UTF-8 for the comparison, including byte-string keys that the encode…","indicators":{"cves":["CVE-2026-110687"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.307Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/bb9da30b67f637f4d57922f0e043376363f28f0c.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-110688","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-110688 — Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the…","description":"Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse.\n\nAt the first non-ASCII byte in a string, the decoder validates UTF-8 from there to the end of its input. incr_parse decodes each buffered value with a fresh…","indicators":{"cves":["CVE-2026-110688"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:17:22.420Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/rurban/Cpanel-JSON-XS/commit/384309f6a297384e69c851b5d64e1c421d9b2dcc.patch","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.80/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112768","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112768 — Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target accou…","description":"Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user update before authorizing the caller, and reflects their outcome in the response. An unauthorized caller, with or without a session, can confirm guessed usernames or emails and, when…","indicators":{"cves":["CVE-2026-112768"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:53.790Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/parse-community/parse-server/security/advisories/GHSA-p49q-9w65-f9p7","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/parse-server-before-8.6.99-and-9-x-before-9.10.3-alpha.2-information-disclosure-via-user-update","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112769","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112769 — Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField…","description":"Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of the _Session class when creating sessions. An authenticated user, or anyone holding that user's session token, can send POST requests to /sessions or /classes/_Session to cr…","indicators":{"cves":["CVE-2026-112769"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:53.930Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/parse-community/parse-server/security/advisories/GHSA-gj37-5hg5-p729","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/parse-server-before-8.6.98-and-9-x-before-9.10.3-alpha.1-session-class-level-permission-bypass","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112778","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112778 — Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Servi…","description":"Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service reso…","indicators":{"cves":["CVE-2026-112778"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T20:17:55.187Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/traefik/traefik/security/advisories/GHSA-rh7m-2m44-x32f","label":"disclosure@vulncheck.com","domainType":"primary"},{"url":"https://www.vulncheck.com/advisories/traefik-before-2.11.46-3.6.17-and-3.7.1-cross-namespace-resource-reference-via-kubernetes-annotations","label":"disclosure@vulncheck.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-111946","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-111946 — Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the d…","description":"Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header.\n\nWhen the response body is a filehandle and the file_etag option is not set, the ETag is built from the file's inode number, modification time and size. Clients receiving affected…","indicators":{"cves":["CVE-2026-111946"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:06.093Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/robrwo/perl-Plack-Middleware-ETag/security/advisories/GHSA-943g-rgq5-6xc8","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"primary"},{"url":"https://metacpan.org/release/RRWO/Plack-Middleware-ETag-0.06/changes","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-1418","label":"9b29abf9-4ab0-4765-b253-1875cd9b441e","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-112390","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112390 — Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while…","description":"Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state, so an embedded TIFF…","indicators":{"cves":["CVE-2026-112390"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.340Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112391","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112391 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recu…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows attacker-controlled arrays and dictionaries when an existing PDF is opened for append. An attacker can provide a deeply nested…","indicators":{"cves":["CVE-2026-112391"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.477Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112393","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112393 — Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and s…","description":"Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation from the prior buffer…","indicators":{"cves":["CVE-2026-112393"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.613Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112394","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112394 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read pa…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose accep…","indicators":{"cves":["CVE-2026-112394"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:17:07.747Z","fetchedAt":"2026-10-20T03:01:48.466Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/392ee6f0d19a4adb766a63e9a99f3c28193b8d31","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-4558-3h8r-v8xp","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112392","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112392 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference inv…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is…","indicators":{"cves":["CVE-2026-112392"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.587Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112397","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112397 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. A…","indicators":{"cves":["CVE-2026-112397"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:06.970Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112398","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112398 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write d…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four co…","indicators":{"cves":["CVE-2026-112398"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.107Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112399","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112399 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal ba…","description":"Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS…","indicators":{"cves":["CVE-2026-112399"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.240Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112400","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112400 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame…","description":"Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches that exception and co…","indicators":{"cves":["CVE-2026-112400"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.367Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112401","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112401 — Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while…","description":"Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly appends immutable bytes for comment sub-blocks and multiple comment extensions, and frame zero is parsed during Image.open(). An attacker can sub…","indicators":{"cves":["CVE-2026-112401"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.503Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-74r2-7ff9-mjj2","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112402","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112402 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when Imagin…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling. The…","indicators":{"cves":["CVE-2026-112402"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.633Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112403","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112403 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width sc…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG…","indicators":{"cves":["CVE-2026-112403"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.770Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112404","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112404 — Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode path…","description":"Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently, Pil…","indicators":{"cves":["CVE-2026-112404"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:07.900Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112405","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112405 — Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference…","description":"Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bit integer or floating-point image backed by image32 storage to be merged as a narrower multiband image. A crafted IPTC file…","indicators":{"cves":["CVE-2026-112405"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:08.027Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112406","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112406 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows Parent relationships without detecting a cycle in the page tree. An attacker can supply a cyclic PDF to an application that appends an image to…","indicators":{"cves":["CVE-2026-112406"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:08.153Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112891","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112891 — Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when…","description":"Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An atta…","indicators":{"cves":["CVE-2026-112891"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:08.640Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/68a3fe957d8a4d552e8c69d96066d749f0614c7e","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-fc9g-5qg7-mf45","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112892","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112892 — Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a s…","description":"Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafted MSP image to an ap…","indicators":{"cves":["CVE-2026-112892"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.210Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112893","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112893 — Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph point…","description":"Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untr…","indicators":{"cves":["CVE-2026-112893"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.350Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112894","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112894 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can sup…","indicators":{"cves":["CVE-2026-112894"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.483Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112895","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112895 — Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while pars…","description":"Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact repeated-offse…","indicators":{"cves":["CVE-2026-112895"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.620Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112896","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112896 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMa…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved. An…","indicators":{"cves":["CVE-2026-112896"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.760Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112897","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112897 — Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory…","description":"Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow convert…","indicators":{"cves":["CVE-2026-112897"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:09.900Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112898","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112898 — Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack…","description":"Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes a…","indicators":{"cves":["CVE-2026-112898"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:10.030Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112900","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112900 — Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument inject…","description":"Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyp…","indicators":{"cves":["CVE-2026-112900"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:10.160Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112901","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112901 — Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to reg…","description":"Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open, when an application calls Image.open() on a small crafted XBM file, XbmImagePlugin applies a backtracking expression to the attacker-controlle…","indicators":{"cves":["CVE-2026-112901"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T22:17:10.293Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","label":"security-advisories@github.com","domainType":"primary"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8","label":"security-advisories@github.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-112991","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-112991 — The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF)…","description":"The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specificall…","indicators":{"cves":["CVE-2026-112991"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T23:17:36.350Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-8355","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-8355 — IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSR…","description":"IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during…","indicators":{"cves":["CVE-2026-8355"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T00:19:20.530Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.ibm.com/support/pages/node/7285723","label":"psirt@us.ibm.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-105298","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-105298 — Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :…","description":"Summary\n\n\n\nBefore version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI (session.req_header().uri) saw the :authority value, but the upstream received the client-supplied Host valu…","indicators":{"cves":["CVE-2026-105298"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:09.787Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://github.com/cloudflare/pingora","label":"cna@cloudflare.com","domainType":"primary"}],"feedLabel":null},{"id":"nvd-CVE-2026-28850","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-28850 — An authorization issue was addressed with improved state management. This issue is fixed in visionOS…","description":"An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-28850"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:11.347Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-28853","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-28853 — The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe…","description":"The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.","indicators":{"cves":["CVE-2026-28853"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:11.460Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-28854","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-28854 — The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Go…","description":"The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.","indicators":{"cves":["CVE-2026-28854"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:11.563Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65356","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65356 — An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gat…","description":"An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-65356"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:16.570Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65372","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65372 — A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate…","description":"A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.","indicators":{"cves":["CVE-2026-65372"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:17.313Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65379","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65379 — The issue was addressed with improved handling of secure input state. This issue is fixed in macOS G…","description":"The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-65379"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:17.860Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-65396","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-65396 — A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden G…","description":"A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-65396"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:18.313Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84490","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84490 — This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS…","description":"This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active.","indicators":{"cves":["CVE-2026-84490"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.553Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84508","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84508 — This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS…","description":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","indicators":{"cves":["CVE-2026-84508"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:20.937Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84547","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84547 — A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS…","description":"A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.","indicators":{"cves":["CVE-2026-84547"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:22.190Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84579","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84579 — A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS…","description":"A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.","indicators":{"cves":["CVE-2026-84579"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:23.593Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84582","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84582 — A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and i…","description":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-84582"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:23.697Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-84613","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-84613 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS…","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected sy…","indicators":{"cves":["CVE-2026-84613","CVE-2026-86918","CVE-2026-86944","CVE-2026-86953"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:24.163Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86868","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86868 — An authentication issue was addressed with improved state management. This issue is fixed in macOS G…","description":"An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able to impersonate other users.","indicators":{"cves":["CVE-2026-86868"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:24.980Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86871","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86871 — An integer underflow was addressed with improved input validation. This issue is fixed in macOS Gold…","description":"An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86871"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.253Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86872","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86872 — A logic issue was addressed with improved state management. This issue is fixed in Safari 27, vision…","description":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","indicators":{"cves":["CVE-2026-86872"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.357Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149039","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86874","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86874 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27.…","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.","indicators":{"cves":["CVE-2026-86874"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.457Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149040","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86875","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86875 — An input validation issue was addressed with improved input validation. This issue is fixed in Xcode…","description":"An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.","indicators":{"cves":["CVE-2026-86875"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:25.557Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149040","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86907","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86907 — An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS…","description":"An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain.","indicators":{"cves":["CVE-2026-86907"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:26.530Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86913","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86913 — A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.…","description":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpecte…","indicators":{"cves":["CVE-2026-86913"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:26.893Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86914","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86914 — An information disclosure issue was addressed with improved state management. This issue is fixed in…","description":"An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information.","indicators":{"cves":["CVE-2026-86914"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.000Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86915","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86915 — A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. A…","description":"A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86915"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.100Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86919","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86919 — A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and i…","description":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","indicators":{"cves":["CVE-2026-86919"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.390Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86921","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86921 — A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPad…","description":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","indicators":{"cves":["CVE-2026-86921"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.493Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86922","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86922 — A type confusion issue was addressed with improved state management. This issue is fixed in Safari 2…","description":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","indicators":{"cves":["CVE-2026-86922"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.600Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149039","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86928","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86928 — A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga…","description":"A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.","indicators":{"cves":["CVE-2026-86928"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.697Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86932","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86932 — An authorization issue was addressed with improved state management. This issue is fixed in macOS Go…","description":"An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-86932"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.793Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86933","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86933 — A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS…","description":"A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.","indicators":{"cves":["CVE-2026-86933"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.890Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86935","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86935 — This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Ga…","description":"This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.","indicators":{"cves":["CVE-2026-86935"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:27.990Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86940","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86940 — This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 2…","description":"This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory.","indicators":{"cves":["CVE-2026-86940"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.080Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86948","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86948 — This issue was addressed by enforcing library validation on the affected binaries. This issue is fix…","description":"This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.","indicators":{"cves":["CVE-2026-86948","CVE-2026-86949"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.270Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149040","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86955","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86955 — An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 a…","description":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-86955","CVE-2026-86976"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.570Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86957","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86957 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 a…","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected sy…","indicators":{"cves":["CVE-2026-86957"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.660Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86959","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86959 — An input validation issue was addressed with improved input validation. This issue is fixed in iOS 2…","description":"An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to unexpected process termination.","indicators":{"cves":["CVE-2026-86959"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.763Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86961","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86961 — A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS…","description":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.","indicators":{"cves":["CVE-2026-86961"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.857Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86962","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86962 — A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 a…","description":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86962"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:28.957Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86963","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86963 — A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 2…","description":"A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service.","indicators":{"cves":["CVE-2026-86963"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.060Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149041","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86975","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86975 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and…","description":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","indicators":{"cves":["CVE-2026-86975"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.160Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149036","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149037","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149038","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86977","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86977 — An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS…","description":"An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.","indicators":{"cves":["CVE-2026-86977"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.353Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149034","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86979","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86979 — A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An…","description":"A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.","indicators":{"cves":["CVE-2026-86979"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.450Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149035","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-86981","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-86981 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in mac…","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.","indicators":{"cves":["CVE-2026-86981"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T01:17:29.540Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://support.apple.com/en-us/149042","label":"product-security@apple.com","domainType":"other"},{"url":"https://support.apple.com/en-us/149043","label":"product-security@apple.com","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-102438","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-102438 — An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execut…","description":"An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process.\nRefer to the '\nSecurity Update for Armoury Crate App ' section…","indicators":{"cves":["CVE-2026-102438"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:08.147Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.asus.com/security-advisory","label":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-17518","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-17518 — Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenti…","description":"Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.\nRefer to the ' Security Update for ASUS Router Firmware' section on…","indicators":{"cves":["CVE-2026-17518"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:11.307Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.asus.com/security-advisory","label":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","domainType":"other"}],"feedLabel":null},{"id":"nvd-CVE-2026-75753","source":"nvd","category":"vulnerability","severity":"unknown","title":"CVE-2026-75753 — Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby…","description":"Missing Authentication for a Critical Function  in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return device identification information and switch into a specific mode. As a result, when the router encounters abnormal con…","indicators":{"cves":["CVE-2026-75753"],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-20T02:17:11.840Z","fetchedAt":"2026-10-20T03:01:48.467Z","references":[{"url":"https://www.asus.com/security-advisory","label":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","domainType":"other"}],"feedLabel":null},{"id":"vendor-cve-2026-80092-microsoft-identity-web-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability","description":"Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1, respectively. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80092","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106258-uninitialized-resource","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106258: Uninitialized resource","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106258","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106273","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106370","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106376","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106379","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106386","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106184","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106202","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106215","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106231","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106245","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106275","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106261","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106263-improper-input-validation","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106263: Improper input validation","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106263","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106299","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106331","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106396","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106185","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106226","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106264-missing-authorization","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106264: Missing authorization","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106264","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106271","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106288","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106289","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106418","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106425","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106312","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106340","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106344","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110160","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106355","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106362","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106363","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106365","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106369","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106384","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106388","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106410","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106183","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106187","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106191","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106194","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106196","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106198","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106205","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106208","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106217","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106224","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106225","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106250","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106267","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106268-use-after-free","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106268: Use after free","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106268","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106278","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106291","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106421","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106423","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106315","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106318","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110136","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110137","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110138","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110139","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106335","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110142","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110145","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110147","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110148","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110149","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110151","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110153","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106347","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110154","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106349","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110157","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110161","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110162","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110163","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110164","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110165","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106357","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106358","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110167","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110168","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110169","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110170","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110171","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110172","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106373","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106382","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106383","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106393","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106411","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106190","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106193","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106197","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106200","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106204","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106211","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106227","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106233","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106234","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106235","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106248","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106257","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106269","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106281","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106283","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106270-incorrect-authorization","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106270: Incorrect authorization","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106270","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106295","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106297","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106422","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106306","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106307","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106309","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106314","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106324","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106327","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106328","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106329","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106333","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110144","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106350","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110159","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106352","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106364","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106371","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106381","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106389","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106391","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106398","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106402","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106403","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106404","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106407","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102322","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106195","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106199","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106212","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106222","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106241","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106246","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106244","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106249","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106280","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106253","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106259","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106260","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106274-incorrect-reference-resolution","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106274: Incorrect reference resolution","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106274","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106308","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106325","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110156","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106409","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106181","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106230","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106279","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106276-ui-misrepresentation","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106276: UI misrepresentation","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106276","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106302","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106316","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106338","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106179","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106182","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106229","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106232","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106236","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106251","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106265","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106285","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106272","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108465-windows-update-delivery-optimization-elevation-of-privilege-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108465","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106287-information-loss","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106287: Information loss","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106287","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106292-buffer-overflow","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106292: Buffer overflow","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106292","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110152","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110155","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110166","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106247","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106412-race-condition","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106412: Race condition","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106412","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106413","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106300","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106426","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106377","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106385","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106201","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106207","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106213","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106238","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106255","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106293-type-confusion","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106293: Type confusion","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106293","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110140","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106341","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106374","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106240","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106294-incomplete-cleanup","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106294: Incomplete cleanup","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106294","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106375","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106394","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106203","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106243","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106262","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106415-information-leak","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106415: Information leak","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106415","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106424","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106321","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106330","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106334","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110146","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106342","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106348","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106360","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106392","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106214","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106220","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106237","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106242","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106277","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106256","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106416-code-injection","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106416: Code injection","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106416","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106189","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106417-integer-overflow","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106417: Integer overflow","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106417","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106332","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106239","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106420-incorrect-calculation","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106420: Incorrect calculation","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106420","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106301-confused-deputy","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106301: Confused deputy","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106301","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106359","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106188","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106228","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106266","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106286","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106303-observable-discrepancy","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106303: Observable discrepancy","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106303","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110141","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106336","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106351","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106180","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106210","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106304-out-of-bounds-read","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106304: Out of bounds read","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106304","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106399","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106284","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106310-use-of-released-resource","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106310: Use of released resource","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106310","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106339","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106345","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106311-clickjacking","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106311: Clickjacking","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106311","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106356","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106322-open-redirect","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106322: Open redirect","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106322","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-110143-use-of-uninitialized-variable","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-110143: Use of uninitialized variable","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110143","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106343-improper-state-validation","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106343: Improper state validation","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106343","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106346","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-110150-privilege-elevation","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-110150: Privilege elevation","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110150","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106378","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106354-improper-resource-exposure","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106354: Improper resource exposure","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.991Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106354","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106390-incorrect-provision-of-specified-functionality","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106390: Incorrect provision of specified functionality","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106390","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106401-out-of-bounds-write","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106401: Out of bounds write","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106401","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106186-uncontrolled-search-path-element","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106186: Uncontrolled search path element","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106186","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106216-cross-site-request-forgery","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106216: Cross-site request forgery","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106216","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-109468-asp-net-core-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-109468 ASP.NET Core Denial of Service Vulnerability","description":"Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109468","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70186","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70181","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70159","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96236","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96233","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70196","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70056-windows-update-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70056 Windows Update Service Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70056","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70139","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70142","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100200","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100203","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83518-rpc-runtime-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83518 RPC Runtime Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83518","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83908","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83654-windows-modern-device-management-mdm-elevation-of-privilege-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83654 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83654","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85833","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108396","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108133","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83708-windows-installer-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83708 Windows Installer Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83708","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71339","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59127","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108468","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70272","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83775","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83779","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85358","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85361","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85364","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85366","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85796","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88080","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87708","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87711","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88124","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96302","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96305","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96307","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96308","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69471","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69635","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83676","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83680","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83702","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83717","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83718","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83752","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83767","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83899","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85941","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88076","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87693","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87694","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87704","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87700","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87715","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85377-windows-cd-rom-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85377 Windows CD-ROM Driver Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85377","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69283","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83888","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85790-microsoft-quic-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85790 Microsoft QUIC Information Disclosure Vulnerability","description":"Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85822-windows-exfat-file-system-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85822 Windows exFAT File System Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85822","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83881","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70170-windows-kernel-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70170 Windows Kernel Denial of Service Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70170","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108466","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87716-windows-storage-spaces-controller-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87716 Windows Storage Spaces Controller Denial of Service Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87716","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70031-windows-iscsi-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70031 Windows iSCSI Denial of Service Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70031","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96222-active-directory-federation-services-ad-fs-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability","description":"Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108131","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83646","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83674","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83511","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96252","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103576","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96044-microsoft-office-sharepoint-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96044 Microsoft Office SharePoint Elevation of Privilege Vulnerability","description":"CWE added. Informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102860","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102861","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102862","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102863","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102866","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105720","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70251","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70266","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88198","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70202","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70246","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88164","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88206","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105008-windows-schannel-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105008 Windows Schannel Spoofing Vulnerability","description":"CWE added. Informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105008","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85818","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70162-net-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70162 .NET Denial of Service Vulnerability","description":"Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69651","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96958","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58280","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108471-windows-virtualization-based-security-vbs-enclave-elevation-of-p","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","description":"CWE added. Informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108471","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88074","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96914","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102211","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108130","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-chromium-cve-2026-106252-incorrect-comparison","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Chromium CVE-2026-106252: Incorrect comparison","description":"This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106252","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-109461-microsoft-authentication-library-msal-for-node-js-information-di","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-109461 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability","description":"Corrected fix build number. Informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109461","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70583-windows-core-messaging-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70583","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70584","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69918","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83587","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-65775-windows-win32k-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65775","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70060","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70076","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70104","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70108","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70117","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70176","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70249","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70253","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70271","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70273","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70285","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83866","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70067","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70144","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70209","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70236","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83566","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83841","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83883","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-50696-internet-key-exchange-ike-protocol-denial-of-service-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50696","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108433-microsoft-office-word-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108433 Microsoft Office Word Security Feature Bypass Vulnerability","description":"Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any furth…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108433","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88210","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108434-microsoft-office-word-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108434 Microsoft Office Word Information Disclosure Vulnerability","description":"Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any furth…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108434","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108435","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108436","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108438","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70206","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70263","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88167","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88169","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102867","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108453-microsoft-office-powerpoint-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108453 Microsoft Office PowerPoint Information Disclosure Vulnerability","description":"Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any furth…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108453","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108454","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108455","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97005","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97744","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88183","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88203","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-66822-net-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-66822 .NET Information Disclosure Vulnerability","description":"Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66822","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96232","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96229","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70161-net-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70161 .NET Elevation of Privilege Vulnerability","description":"Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70165","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70190","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70179-asp-net-core-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability","description":"Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70175","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70188-asp-net-core-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability","description":"Updated the Security Updates table to add KB article links for ASP.NET Core 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88175-microsoft-office-excel-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88175 Microsoft Office Excel Information Disclosure Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88175","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97740","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88184","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88192","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97779","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97743","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97760","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88153","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88151","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88201","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97014","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70214","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70219","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88154","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88172","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88190","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88195","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69922","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96995-microsoft-office-word-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96995 Microsoft Office Word Elevation of Privilege Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96995","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96997-microsoft-office-onenote-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96997 Microsoft Office OneNote Elevation of Privilege Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96997","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70281-microsoft-office-outlook-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70281 Microsoft Office Outlook Information Disclosure Vulnerability","description":"Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70281","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85363-net-framework-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85363 .NET Framework Elevation of Privilege Vulnerability","description":"Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96238-net-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96238 .NET Security Feature Bypass Vulnerability","description":"Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96238","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-92707-messagepack-csharp-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability","description":"Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69366-windows-kernel-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69366","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69898","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70106","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70121","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70114","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83675","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83690","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83768","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83796","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83833","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83882","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70243","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85372","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85836","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85837","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85850","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70303","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85945","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96216","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96312","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96317","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96868","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83736","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83735","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83913","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83918","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83924","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88134","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88139","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88141","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70160","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70111","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96913","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96929","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102207","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103578","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97803","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-68825-windows-bind-filter-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68825","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70274","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83692","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83852","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70299","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88168","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83900","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-77499-windows-dhcp-server-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77499","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70201","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83665","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-72937-windows-storage-port-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72937","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88226","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-62697-windows-push-notifications-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-62697 Windows Push Notifications Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62697","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70198","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83867","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96313","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-32176-sql-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability","description":"Added SQL software to the Security Updates table.  Customers that are running supported version of SQL are encouraged to update to the indicated version to be protected from this vulnerability.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32176","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96956","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105723-windows-distributed-file-system-dfs-elevation-of-privilege-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105723 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105723","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96938","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70245-windows-ancillary-function-driver-for-winsock-elevation-of-privil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70245 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70245","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70168","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70205","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70225","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83738","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70237","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88149","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84019-windows-advanced-rasterization-platform-elevation-of-privilege-vu","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84019 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84019","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85868-windows-common-log-file-system-driver-elevation-of-privilege-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85868 Windows Common Log File System Driver Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85868","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85870","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70233","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85355","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102188-windows-storage-port-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102188 Windows Storage Port Driver Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102188","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96863","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83943-azure-api-center-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83943 Azure API Center Information Disclosure Vulnerability","description":"CWE added. Informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83943","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-62688-windows-midi-service-module-elevation-of-privileges-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62688","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83828","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83751","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88079","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-62755-windows-dhcp-client-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability","description":"Updated an acknowledgement. This is an informational change only.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62755","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-adv260001-adv260001-hardening-changes-for-refs-volumes-on-removable-media","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"ADV260001 ADV260001 Hardening changes for ReFS volumes on removable media","description":"Starting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the [Resilient File System (ReFS)](https://learn.microsoft.com/windows-server/storage/refs/refs-overview).  This change is not enable by default until 2027. Please see [Hardening changes fo…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/ADV260001","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105725-windows-security-app-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability","description":"Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105725","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105727-microsoft-dynamics-365-business-central-elevation-of-privilege-v","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105727 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105727","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105728-dynamics-business-central-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105728 Dynamics Business Central Information Disclosure Vulnerability","description":"Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105728","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102229-visual-studio-code-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102229 Visual Studio Code Information Disclosure Vulnerability","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102229","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102231-visual-studio-code-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102231 Visual Studio Code Security Feature Bypass Vulnerability","description":"Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102231","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102232","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102233","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102234","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102851","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102859-microsoft-office-sharepoint-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102859","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102864","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105713","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88204","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88209","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88208","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97783","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102865-microsoft-office-sharepoint-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability","description":"Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102865","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70259","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70298","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70217","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85932","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96183-windows-health-and-optimized-experiences-service-information-disc","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96183 Windows Health and Optimized Experiences Service Information Disclosure Vulnerability","description":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96183","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-94506-microsoft-office-access-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-94506 Microsoft Office Access Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94506","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97800-windows-mobile-broadband-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97800 Windows Mobile Broadband Elevation of Privilege Vulnerability","description":"Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97800","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108398-net-framework-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability","description":"Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.992Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105719-microsoft-sharepoint-server-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105719 Microsoft SharePoint Server Information Disclosure Vulnerability","description":"Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105719","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105722-windows-broadcast-dvr-user-service-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105722 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105722","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108461","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88103","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88105","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88113","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70122","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96919","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102193","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102195","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102196","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102197","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103554","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103565","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97806","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97807","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97808","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97809","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105726-microsoft-defender-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105726 Microsoft Defender Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105726","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70264","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70235-windows-event-tracing-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70235 Windows Event Tracing Spoofing Vulnerability","description":"Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70235","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105731-microsoft-office-graphics-component-information-disclosure-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105731 Microsoft Office Graphics Component Information Disclosure Vulnerability","description":"Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105731","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105732-sysinternals-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105732 SysInternals Elevation of Privilege Vulnerability","description":"Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105732","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100205","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105729","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108399-windows-hyper-v-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108399","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83839","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85343","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85369","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88071","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96223","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70023","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108462-windows-kernel-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108462 Windows Kernel Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108462","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70063","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70077","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70199","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70232","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83925","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102187","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108464-software-protection-platform-spp-elevation-of-privilege-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108464 Software Protection Platform (SPP) Elevation of Privilege Vulnerability","description":"Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108464","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-49785-uefi-secure-boot-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-49785 UEFI Secure Boot Security Feature Bypass Vulnerability","description":"Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49785","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-72968-windows-program-compatibility-assistant-service-elevation-of-priv","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-72968 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72968","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72934","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72969","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69743","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96920","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69596","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83781","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69363-windows-error-reporting-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69363 Windows Error Reporting Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69363","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70103","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69354","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69387","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83669","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83826","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85354","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85800","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83689","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83750","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83840","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70566-windows-schannel-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70566 Windows Schannel Elevation of Privilege Vulnerability","description":"Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70566","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-61931-windows-perception-simulation-service-elevation-of-privilege-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-61931 Windows Perception Simulation Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61931","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69763-windows-storage-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69763 Windows Storage Elevation of Privilege Vulnerability","description":"Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69763","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69766","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69935","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83911","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69931","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69856","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100216","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100225","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102189","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102191","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69795-windows-clipboard-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69795 Windows Clipboard Server Elevation of Privilege Vulnerability","description":"Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69795","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69867-sqlite-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69867 SQLite Elevation of Privilege Vulnerability","description":"Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69867","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69914-windows-appx-deployment-service-information-disclosure-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69914 Windows AppX Deployment Service Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69914","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69969","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69840-windows-certificates-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69840 Windows Certificates Elevation of Privilege Vulnerability","description":"Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69840","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69850","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69926-desktop-window-manager-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69926 Desktop Window Manager Elevation of Privilege Vulnerability","description":"Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69926","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70255","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96108","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69880","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70228","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88093","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69905-windows-appx-deployment-service-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69905 Windows AppX Deployment Service Tampering Vulnerability","description":"Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69905","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69909-microsoft-com-for-windows-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69909 Microsoft COM for Windows Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69909","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69945-windows-appx-deployment-extensions-elevation-of-privilege-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69945 Windows AppX Deployment Extensions Elevation of Privilege Vulnerability","description":"Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69945","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69950-windows-overlay-filter-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69950 Windows Overlay Filter Elevation of Privilege Vulnerability","description":"Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69950","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69952","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69953","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69957","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83727","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83749","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83879","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105004","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69954-windows-overlay-filter-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69954 Windows Overlay Filter Information Disclosure Vulnerability","description":"Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69954","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69967","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69963-kernel-streaming-service-driver-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69963 Kernel Streaming Service Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69963","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69966","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69964","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69970","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69968-windows-libarchive-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69968 Windows libarchive Tampering Vulnerability","description":"Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69968","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69973","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69971-windows-kernel-mode-drivers-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69971 Windows Kernel-Mode Drivers Information Disclosure Vulnerability","description":"Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69971","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85857","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96247","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96849","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69974-desktop-window-manager-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69974 Desktop Window Manager Information Disclosure Vulnerability","description":"Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69974","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70234","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69978-microsoft-windows-vmswitch-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69978 Microsoft Windows VMSwitch Denial of Service Vulnerability","description":"Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69978","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69979-windows-appx-deployment-service-security-feature-bypass-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69979 Windows AppX Deployment Service Security Feature Bypass Vulnerability","description":"Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69979","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70010-windows-ntfs-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70010 Windows NTFS Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70010","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83652","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83706","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69916","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70172","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96217","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96928","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81971","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83508","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83567","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83585","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83859","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69915","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96916","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96918","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96931","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70015-windows-local-security-authority-subsystem-service-lsass-elevatio","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70015 Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability","description":"Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70015","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70017-windows-secure-kernel-mode-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70017 Windows Secure Kernel Mode Information Disclosure Vulnerability","description":"Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70017","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96865","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70021-windows-direct-composition-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70021 Windows Direct Composition Elevation of Privilege Vulnerability","description":"Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70021","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83902","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83896","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70151","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83912","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83922","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83903","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85902","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85906","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70025-windows-netlogon-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70025 Windows Netlogon Denial of Service Vulnerability","description":"Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70025","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70072","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70026-windows-secure-kernel-mode-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70026 Windows Secure Kernel Mode Elevation of Privilege Vulnerability","description":"Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70026","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70027-windows-subsystem-for-linux-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70027 Windows Subsystem for Linux Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70027","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96309","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85879","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70033-windows-remote-desktop-gateway-rd-gateway-denial-of-service-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70033 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability","description":"Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70033","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70057-windows-routing-and-remote-access-service-rras-security-feature-b","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70057 Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability","description":"Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70057","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70059-windows-ole-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70059 Windows OLE Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70059","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70138","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70064-windows-kerberos-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70064 Windows Kerberos Elevation of Privilege Vulnerability","description":"Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70064","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70241","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83720","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108132","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70079-windows-dns-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70079 Windows DNS Denial of Service Vulnerability","description":"Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70079","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70082","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70166","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70155","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70085-role-dns-server-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70085 Role: DNS Server Tampering Vulnerability","description":"Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70085","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70083","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70071","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96926","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103560","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70087-role-dns-server-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70087 Role: DNS Server Security Feature Bypass Vulnerability","description":"Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70087","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70090-windows-netlogon-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70090 Windows Netlogon Information Disclosure Vulnerability","description":"Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70090","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70097-windows-virtualization-based-security-vbs-enclave-spoofing-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70097 Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70097","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83885","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70093-windows-rich-text-edit-control-elevation-of-privilege-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70093 Windows Rich Text Edit Control Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70093","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70123-microsoft-graphics-component-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70123 Microsoft Graphics Component Elevation of Privilege Vulnerability","description":"Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70123","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85338","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102209","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70140-windows-audio-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70140 Windows Audio Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70140","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70118","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83644","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70230","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97799","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70115-microsoft-windows-search-component-elevation-of-privilege-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70115 Microsoft Windows Search Component Elevation of Privilege Vulnerability","description":"Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70115","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70136","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70150","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70177","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70156","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83704","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70086","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85869","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88160","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83829","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83850","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88182","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88191","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96324","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96911","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96937","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105010","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108136","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70132-windows-portable-device-file-system-driver-elevation-of-privilege","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70132 Windows Portable Device File System Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70132","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70135-windows-remote-pos-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70135 Windows Remote POS Driver Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70135","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70133-windows-smb-server-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70133 Windows SMB Server Denial of Service Vulnerability","description":"Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70133","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96325","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70141-microsoft-windows-search-component-information-disclosure-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70141 Microsoft Windows Search Component Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70141","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70173","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83686","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96910","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70169-windows-connected-devices-platform-service-elevation-of-privilege","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70169 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70169","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70195-windows-ancillary-function-driver-for-winsock-information-disclos","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70195 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability","description":"Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70195","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70218-windows-staterepository-api-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70218 Windows StateRepository API Elevation of Privilege Vulnerability","description":"Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70218","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85911","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102216","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70223-windows-console-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70223 Windows Console Driver Elevation of Privilege Vulnerability","description":"Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70223","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70252-virtual-hard-disk-vhd-miniport-driver-elevation-of-privilege-vule","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70252 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","description":"Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70252","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70278-microsoft-windows-media-foundation-elevation-of-privilege-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70278 Microsoft Windows Media Foundation Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70278","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70131","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96186","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102201","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70280-windows-hello-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70280 Windows Hello Security Feature Bypass Vulnerability","description":"Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70280","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83926","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70284-win32k-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70284 Win32k Information Disclosure Vulnerability","description":"Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70284","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70211","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70288","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70292","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70293","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70294","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70295","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83755","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-68836-windows-kernel32-dll-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-68836 Windows kernel32.dll Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68836","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69644-windows-iscsi-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69644 Windows iSCSI Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69644","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69721","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-72955-windows-application-compatibility-cache-elevation-of-privilege-vu","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-72955 Windows Application Compatibility Cache Elevation of Privilege Vulnerability","description":"Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72955","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70580-windows-credential-guard-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70580 Windows Credential Guard Spoofing Vulnerability","description":"Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70580","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69650-windows-key-distribution-center-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69650 Windows Key Distribution Center Elevation of Privilege Vulnerability","description":"Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69650","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69633-windows-update-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69633 Windows Update Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69633","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69673","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69718","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69882","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69733","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69783","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96323","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-81964-windows-update-orchestrator-service-security-feature-bypass-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-81964 Windows Update Orchestrator Service Security Feature Bypass Vulnerability","description":"Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81964","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-81969-windows-server-update-service-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-81969 Windows Server Update Service Elevation of Privilege Vulnerability","description":"Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81969","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83499","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105009","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83504-windows-smartscreen-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83504 Windows SmartScreen Information Disclosure Vulnerability","description":"Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83504","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83500-windows-bitlocker-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83500 Windows BitLocker Security Feature Bypass Vulnerability","description":"Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83500","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83510-windows-setup-files-cleanup-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83510 Windows Setup Files Cleanup Elevation of Privilege Vulnerability","description":"Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83510","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73027","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83505","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83509","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83516-windows-local-security-authority-subsystem-service-lsass-denial-o","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83516 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability","description":"Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83516","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83649","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83515-rpc-runtime-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83515 RPC Runtime Information Disclosure Vulnerability","description":"Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83515","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83521-windows-ike-extension-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83521 Windows IKE Extension Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83521","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103569","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83571-windows-audio-service-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83571 Windows Audio Service Information Disclosure Vulnerability","description":"Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83571","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96314","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83575-windows-search-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83575 Windows Search Service Elevation of Privilege Vulnerability","description":"Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83575","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83921","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83920","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83564","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83570","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83574","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83580-windows-client-side-caching-csc-service-elevation-of-privilege-vu","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83580 Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83580","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83699","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70068","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83698","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83583-windows-geotag-broker-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83583 Windows Geotag Broker Elevation of Privilege Vulnerability","description":"Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83583","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83584-windows-smart-card-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83584 Windows Smart Card Elevation of Privilege Vulnerability","description":"Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83584","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83579","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83635-role-dns-server-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83635 Role: DNS Server Denial of Service Vulnerability","description":"Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83635","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88122","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88123","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88125","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88129","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88130","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83641-windows-media-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83641 Windows Media Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83641","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83650","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83648-windows-active-directory-domain-services-denial-of-service-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83648 Windows Active Directory Domain Services Denial of Service Vulnerability","description":"Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83648","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83667","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83647","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83655-network-policy-server-nps-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83655 Network Policy Server (NPS) Denial of Service Vulnerability","description":"Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83655","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83657-windows-modern-device-management-mdm-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83657 Windows Modern Device Management (MDM) Tampering Vulnerability","description":"Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83657","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96855","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83656","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83697","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83658-windows-error-reporting-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83658 Windows Error Reporting Information Disclosure Vulnerability","description":"Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83658","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83747","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83666-active-directory-certificate-services-ad-cs-elevation-of-privileg","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83666 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83666","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83671-windows-hyper-v-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83671 Windows Hyper-V Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83671","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97813","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83678-windows-tcp-ip-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83678 Windows TCP/IP Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83678","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83842","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85368","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85834","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70164","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83682","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96852","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83681-microsoft-powertoys-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83681 Microsoft PowerToys Tampering Vulnerability","description":"Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83681","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83687-windows-connected-user-experiences-and-telemetry-elevation-of-pri","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83687 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","description":"Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83687","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83691-windows-dhcp-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83691 Windows DHCP Server Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83691","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70066","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83694-windows-volume-manager-extension-driver-elevation-of-privilege-vu","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83694 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","description":"Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83694","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85356","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83705-http-sys-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83705 HTTP.sys Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83705","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70208","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83714","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83707-windows-event-tracing-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83707 Windows Event Tracing Elevation of Privilege Vulnerability","description":"Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83707","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70134","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83713-windows-universal-disk-format-file-system-driver-udfs-information","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83713 Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83713","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85821","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85909","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96930","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83715-windows-error-reporting-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83715 Windows Error Reporting Tampering Vulnerability","description":"Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83715","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83719-servicing-stack-updates-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83719 Servicing Stack Updates Information Disclosure Vulnerability","description":"Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83719","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85835","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83722-microsoft-local-security-authority-lsa-server-elevation-of-privil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83722 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","description":"Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83722","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87710","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83723-windows-event-logging-service-information-disclosure-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83723 Windows Event Logging Service Information Disclosure Vulnerability","description":"Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83723","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95904","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83695","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83726-windows-dwm-core-library-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83726 Windows DWM Core Library Elevation of Privilege Vulnerability","description":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83726","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85853","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85854","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85855","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88128","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88177","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88179","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88180","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88181","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88194","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88189","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88188","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83733-windows-print-spooler-components-information-disclosure-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83733 Windows Print Spooler Components Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83733","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85320","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85353","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85847","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83740-windows-hello-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83740 Windows Hello Elevation of Privilege Vulnerability","description":"Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83740","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83853","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83790","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83753-windows-camera-frame-server-monitor-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83753 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83753","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85803","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83771","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83761-windows-win32-kernel-subsystem-elevation-of-privilege-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83761 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","description":"Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83761","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83901","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85802","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85804","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85858","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83756","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83895","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96249","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102208","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83760-microsoft-bluetooth-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83760 Microsoft Bluetooth Driver Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83760","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83776-windows-bluetooth-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83776 Windows Bluetooth Driver Elevation of Privilege Vulnerability","description":"Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83776","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83784-windows-encrypting-file-system-efs-elevation-of-privilege-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83784 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability","description":"Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83784","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85791","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83787-windows-dhcp-server-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83787 Windows DHCP Server Security Feature Bypass Vulnerability","description":"Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83787","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85865","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83793-windows-update-orchestrator-service-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83793 Windows Update Orchestrator Service Elevation of Privilege Vulnerability","description":"Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83793","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83886","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83930","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97812","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83798-windows-update-stack-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83798 Windows Update Stack Spoofing Vulnerability","description":"Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83798","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83827-windows-bluetooth-port-driver-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83827 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83827","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83832-windows-spaceport-sys-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83832 Windows Spaceport.sys Elevation of Privilege Vulnerability","description":"Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83832","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69934","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70102","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96862","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83834-windows-kernel-mode-drivers-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83834 Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability","description":"Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83834","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85871","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83568","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83637","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83837","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96915","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83838-windows-bluetooth-a2dp-driver-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83838 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability","description":"Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83838","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83843-windows-internet-key-exchange-ike-extension-denial-of-service-vul","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83843 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","description":"Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83843","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83685","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83795","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83849-windows-hello-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83849 Windows Hello Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83849","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83907","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83847-microsoft-account-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83847 Microsoft Account Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83847","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85329","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83846-connected-devices-platform-service-cdpsvc-elevation-of-privilege-","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83846 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability","description":"Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83846","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95943","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83848-windows-com-event-system-service-elevation-of-privilege-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83848 Windows COM+ Event System Service Elevation of Privilege Vulnerability","description":"Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83848","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83785","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83830","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96933","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83851-windows-partition-management-driver-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83851 Windows Partition Management Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83851","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83514","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103553","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83854-windows-notification-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83854 Windows Notification Information Disclosure Vulnerability","description":"Improper access control in Windows Notification allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83854","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83855-windows-wlan-service-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83855 Windows WLAN Service Denial of Service Vulnerability","description":"Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83855","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83864-windows-ntfs-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83864 Windows NTFS Information Disclosure Vulnerability","description":"Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83864","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96935","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83737","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83786","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96925","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96927","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83865-windows-internet-wininet-dll-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83865 Windows Internet (wininet.dll) Tampering Vulnerability","description":"Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83865","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83872-windows-tcp-ip-local-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83872 Windows TCP/IP Local Elevation of Privilege Vulnerability","description":"Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83872","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83875-windows-human-interface-device-information-disclosure-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83875 Windows Human Interface Device Information Disclosure Vulnerability","description":"Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83875","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83892","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83884","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83876-windows-shell-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83876 Windows Shell Elevation of Privilege Vulnerability","description":"Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83876","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70222","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83873","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83868-microsoft-bluetooth-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83868 Microsoft Bluetooth Driver Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83868","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96844","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83893-windows-clipboard-user-service-information-disclosure-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83893 Windows Clipboard User Service Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83893","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83764","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70128-hid-parser-library-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70128 HID Parser Library Information Disclosure Vulnerability","description":"Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70128","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83887","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83898","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83904","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70163-microsoft-openssh-for-windows-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70163 Microsoft OpenSSH for Windows Denial of Service Vulnerability","description":"Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70163","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83909-windows-win32-kernel-subsystem-information-disclosure-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83909 Windows Win32 Kernel Subsystem Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83909","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96848","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83774","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83897","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96853","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70248-windows-hyper-v-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70248 Windows Hyper-V Denial of Service Vulnerability","description":"Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70248","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83636","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70286-windows-graphics-component-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70286 Windows Graphics Component Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70286","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85901","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85908","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83569-hid-parser-library-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83569 HID Parser Library Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83569","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83586-windows-resilient-file-system-refs-deduplication-service-elevatio","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83586 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability","description":"Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83586","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83741-internet-explorer-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83741 Internet Explorer Elevation of Privilege Vulnerability","description":"Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83741","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83769-microsoft-openssh-for-windows-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83769 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability","description":"Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83769","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83871","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97811","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83906-windows-shell-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83906 Windows Shell Spoofing Vulnerability","description":"Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83906","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83917-windows-alpc-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83917 Windows ALPC Elevation of Privilege Vulnerability","description":"Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83917","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83927-windows-registry-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83927 Windows Registry Elevation of Privilege Vulnerability","description":"Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83927","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83932-windows-group-policy-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83932 Windows Group Policy Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83932","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100217","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84009-windows-projected-file-system-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84009 Windows Projected File System Tampering Vulnerability","description":"Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84009","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84007-remote-desktop-gateway-service-information-disclosure-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84007 Remote Desktop Gateway Service Information Disclosure Vulnerability","description":"Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84007","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84011-windows-smb-client-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84011 Windows SMB Client Security Feature Bypass Vulnerability","description":"Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84011","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84013-windows-telephony-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84013 Windows Telephony Server Elevation of Privilege Vulnerability","description":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84013","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85810","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84014-windows-device-association-service-elevation-of-privilege-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84014 Windows Device Association Service Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84014","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85332","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85342","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85352","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83710","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85904","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84016-windows-eaphost-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84016 Windows EAPHost Service Elevation of Privilege Vulnerability","description":"Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84016","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84017-windows-routing-and-remote-access-service-rras-denial-of-service-","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84017 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability","description":"Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84017","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85808","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103558","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84018-windows-print-spooler-components-elevation-of-privilege-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84018 Windows Print Spooler Components Elevation of Privilege Vulnerability","description":"Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84018","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85327","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85376","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85933","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-84020-windows-routing-and-remote-access-service-rras-elevation-of-privi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-84020 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","description":"Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84020","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85318-servicing-stack-updates-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85318 Servicing Stack Updates Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85318","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85365","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83506","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83863","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96939","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85319-active-directory-federation-services-ad-fs-denial-of-service-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85319 Active Directory Federation Services (AD FS) Denial of Service Vulnerability","description":"Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85319","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85321","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85324","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83645","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85322-windows-routing-and-remote-access-service-rras-information-disclo","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85322 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability","description":"Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85322","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85794","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96245","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85323-network-device-enrollment-service-ndes-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85323 Network Device Enrollment Service (NDES) Spoofing Vulnerability","description":"Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.993Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85323","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85331-windows-device-association-service-information-disclosure-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85331 Windows Device Association Service Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85331","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85336","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85815","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70227","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96854","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85328-windows-projected-file-system-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85328 Windows Projected File System Elevation of Privilege Vulnerability","description":"Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85328","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85333-windows-performance-monitor-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85333 Windows Performance Monitor Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85333","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85359","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85334-windows-message-queuing-queue-manager-information-disclosure-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85334 Windows Message Queuing Queue Manager Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85334","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96921","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85337-windows-remote-desktop-client-information-disclosure-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85337 Windows Remote Desktop Client Information Disclosure Vulnerability","description":"Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85337","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85341-windows-usb-video-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85341 Windows USB Video Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85341","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85807","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85357-windows-phone-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85357 Windows Phone Service Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85357","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85362-windows-management-instrumentation-elevation-of-privilege-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85362 Windows Management Instrumentation Elevation of Privilege Vulnerability","description":"Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85362","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88091","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96856","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83724","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83783","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85367-windows-cash-drawer-protocol-provider-elevation-of-privilege-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85367 Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability","description":"Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85367","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85370-webdav-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85370 WebDAV Elevation of Privilege Vulnerability","description":"Use after free in WebDAV allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85370","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85827","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85828","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70262","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88126","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88135","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96847","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96843","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102217","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85374-windows-installer-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85374 Windows Installer Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85374","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85830","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83672","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85793-windows-sysmain-service-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85793 Windows Sysmain Service Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85793","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85795-windows-text-services-framework-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85795 Windows Text Services Framework Elevation of Privilege Vulnerability","description":"Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85795","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85797-windows-gdi-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85797 Windows GDI Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85797","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83651","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85805-microsoft-powershell-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85805 Microsoft PowerShell Security Feature Bypass Vulnerability","description":"Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85805","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70185","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85812-windows-bind-filter-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85812 Windows Bind Filter Driver Information Disclosure Vulnerability","description":"Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85812","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85816-windows-wi-fi-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85816 Windows Wi-Fi Driver Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85816","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85820-windows-universal-disk-format-file-system-driver-udfs-elevation-o","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85820 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","description":"Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85820","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85825","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83513","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83857","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96946","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96947","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96949","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96950","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102205","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102218","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102215","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85823-windows-composite-image-file-system-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85823 Windows Composite Image File System Elevation of Privilege Vulnerability","description":"Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85823","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85824","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85826-windows-fast-fat-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85826 Windows Fast FAT Driver Elevation of Privilege Vulnerability","description":"Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85826","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85829-windows-wired-autoconfig-service-elevation-of-privilege-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85829 Windows Wired AutoConfig Service Elevation of Privilege Vulnerability","description":"Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85829","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69798","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85831-windows-biometric-service-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85831 Windows Biometric Service Information Disclosure Vulnerability","description":"Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85831","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85832-windows-background-intelligent-transfer-service-bits-elevation-of","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85832 Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85832","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85843","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85848","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88146","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88118","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88152","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85840-windows-event-viewer-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85840 Windows Event Viewer Information Disclosure Vulnerability","description":"Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85840","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85842-windows-image-acquisition-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85842 Windows Image Acquisition Elevation of Privilege Vulnerability","description":"Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85842","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85930","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85846-web-account-manager-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85846 Web Account Manager Elevation of Privilege Vulnerability","description":"Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85846","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85849-windows-appx-deployment-service-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85849 Windows AppX Deployment Service Elevation of Privilege Vulnerability","description":"Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85849","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85934","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85851-windows-smartscreen-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85851 Windows SmartScreen Elevation of Privilege Vulnerability","description":"Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85851","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70051","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85852-windows-management-instrumentation-information-disclosure-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85852 Windows Management Instrumentation Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85852","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96851","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85860-windows-message-queuing-queue-manager-elevation-of-privilege-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85860 Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability","description":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85860","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85859-windows-message-queuing-queue-manager-denial-of-service-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85859 Windows Message Queuing Queue Manager Denial of Service Vulnerability","description":"Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85859","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85861-clipboard-user-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85861 Clipboard User Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85861","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85863","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85912","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85864-python-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85864 Python Elevation of Privilege Vulnerability","description":"Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85864","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-71347-windows-security-center-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-71347 Windows Security Center Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71347","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70212","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85881-microsoft-office-graphics-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85881 Microsoft Office Graphics Elevation of Privilege Vulnerability","description":"Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85881","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85891-azure-hdinsight-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability","description":"Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85891","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85915-windows-pci-bus-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85915 Windows PCI Bus Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85915","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96917","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85920-windows-bitlocker-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85920 Windows BitLocker Elevation of Privilege Vulnerability","description":"Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85920","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88070","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83634","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88096-windows-dcom-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88096 Windows DCOM Server Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88096","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88101-microsoft-input-method-editor-ime-elevation-of-privilege-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88101 Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability","description":"Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88101","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88158-microsoft-digest-authentication-information-disclosure-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88158 Microsoft Digest Authentication Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88158","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88161-windows-local-security-authority-lsa-elevation-of-privilege-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88161 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability","description":"Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88161","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88162-windows-encrypting-file-system-efs-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88162 Windows Encrypting File System (EFS) Tampering Vulnerability","description":"Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88162","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69877-azure-devops-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability","description":"Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70041-windows-cd-rom-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70041 Windows CD-ROM Driver Information Disclosure Vulnerability","description":"Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70041","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70048-windows-resilient-file-system-refs-elevation-of-privilege-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70048 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70048","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70210-windows-ole-db-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70210 Windows OLE DB Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70210","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70216-windows-mobile-device-management-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70216 Windows Mobile Device Management Tampering Vulnerability","description":"Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70216","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70238-windows-storage-spaces-controller-elevation-of-privilege-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70238 Windows Storage Spaces Controller Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70238","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87706","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88100","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88143","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70244-windows-dns-server-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70244 Windows DNS Server Information Disclosure Vulnerability","description":"Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70244","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70270-windows-container-isolation-fs-filter-driver-elevation-of-privile","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70270 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability","description":"Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70270","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70277-windows-fast-fat-file-system-driver-information-disclosure-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70277","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85867-windows-remote-access-connection-manager-elevation-of-privilege-v","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85867 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85867","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85914-windows-embedded-mode-service-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85914 Windows Embedded Mode Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85914","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96932","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85916-azure-active-directory-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85916 Azure Active Directory Information Disclosure Vulnerability","description":"Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85916","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85935-windows-usb-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85935 Windows USB Driver Information Disclosure Vulnerability","description":"Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85935","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85938-windows-broadcast-dvr-user-service-information-disclosure-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85938 Windows Broadcast DVR User Service Information Disclosure Vulnerability","description":"Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85938","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70148","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103567","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85939-windows-kernel-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85939 Windows Kernel Security Feature Bypass Vulnerability","description":"Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85939","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87691-windows-management-services-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87691 Windows Management Services Elevation of Privilege Vulnerability","description":"Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87691","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87707-windows-fax-and-scan-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87707 Windows Fax and Scan Service Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87707","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87712-microsoft-windows-qos-scheduler-driver-elevation-of-privilege-vul","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87712 Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability","description":"Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87712","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87714-webdav-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87714 WebDAV Security Feature Bypass Vulnerability","description":"Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87714","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88073-windows-graphics-kernel-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88073 Windows Graphics Kernel Elevation of Privilege Vulnerability","description":"Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88073","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88110","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96118","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102194","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-68883-microsoft-sql-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-68883 Microsoft SQL Server Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68883","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85876","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88082","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85919","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88088","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88085","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88098-windows-security-support-provider-interface-elevation-of-privileg","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88098 Windows Security Support Provider Interface Elevation of Privilege Vulnerability","description":"Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88098","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88099-windows-failover-cluster-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88099 Windows Failover Cluster Denial of Service Vulnerability","description":"Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88099","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96945","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102192","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88106-windows-cloud-files-mini-filter-driver-elevation-of-privilege-vul","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88106 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","description":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88106","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88107","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83696","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88132-azure-key-vault-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability","description":"Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88137-webdav-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88137 WebDAV Information Disclosure Vulnerability","description":"Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88137","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96846","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88140-windows-key-storage-provider-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88140 Windows Key Storage Provider Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88140","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69506","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69923-windows-ai-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability","description":"Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69923","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69940-windows-client-for-nfs-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69940 Windows Client for NFS Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69940","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69955","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69949-windows-client-for-nfs-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69949 Windows Client for NFS Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69949","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70113","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69977-quality-windows-audio-video-experience-qwave-service-elevation-of","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69977 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability","description":"Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69977","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69982-active-directory-federation-services-ad-fs-security-feature-bypas","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69982 Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability","description":"Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69982","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70005","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70008-windows-ip-over-usb-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70008 Windows IP Over USB Service Elevation of Privilege Vulnerability","description":"Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70008","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70011-windows-ip-over-usb-service-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70011 Windows IP Over USB Service Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70011","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70045-windows-work-folders-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70045 Windows Work Folders Elevation of Privilege Vulnerability","description":"Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70045","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70137-windows-remote-access-connection-manager-information-disclosure-v","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70137 Windows Remote Access Connection Manager Information Disclosure Vulnerability","description":"Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70137","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70044-microsoft-windows-media-foundation-information-disclosure-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70044 Microsoft Windows Media Foundation Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70044","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70110-microsoft-postscript-printer-driver-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70110 Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability","description":"Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70110","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70092","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70109","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70116-windows-resilient-file-system-refs-security-feature-bypass-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70116 Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability","description":"Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70116","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70149-windows-client-side-caching-driver-csc-sys-elevation-of-privilege","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70149 Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability","description":"Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70149","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70276-microsoft-office-click-to-run-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70276 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","description":"Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70276","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97774","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88109","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85340","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70049-microsoft-configuration-manager-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70049 Microsoft Configuration Manager Elevation of Privilege Vulnerability","description":"Updated the vulnerability title and description to correctly identify Microsoft Configuration Manager as the affected product. Added an FAQ explaining the exploitation requirements. This is an informational change only; the affected products, security updates, severity, and CVSS scores are unchanged…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96204-azure-arc-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96204 Azure Arc Elevation of Privilege Vulnerability","description":"Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96204","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96215-windows-autopilot-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96215 Windows Autopilot Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96215","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108134","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96218-windows-update-stack-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96218 Windows Update Stack Tampering Vulnerability","description":"Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96218","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96220-windows-assigned-access-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96220 Windows Assigned Access Elevation of Privilege Vulnerability","description":"Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96220","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96244-windows-internal-system-user-profile-elevation-of-privilege-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96244 Windows Internal System User Profile Elevation of Privilege Vulnerability","description":"Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96244","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96246-network-policy-server-nps-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96246 Network Policy Server (NPS) Information Disclosure Vulnerability","description":"Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96246","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96248-windows-host-guardian-service-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96248 Windows Host Guardian Service Denial of Service Vulnerability","description":"Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96248","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96306-windows-sysmain-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96306 Windows Sysmain Service Elevation of Privilege Vulnerability","description":"Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96306","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96311-windows-network-list-service-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96311 Windows Network List Service Tampering Vulnerability","description":"Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96311","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96315-windows-overlay-filter-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96315 Windows Overlay Filter Tampering Vulnerability","description":"Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96315","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96316-windows-routing-and-remote-access-service-rras-tampering-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96316 Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability","description":"Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96316","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96319-windows-usb-print-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96319 Windows USB Print Driver Elevation of Privilege Vulnerability","description":"Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96319","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96250","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96301","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96310","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96254","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96253","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96304","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96318-windows-resume-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96318 Windows Resume Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.994Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96318","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96866-network-device-enrollment-service-ndes-denial-of-service-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96866 Network Device Enrollment Service (NDES) Denial of Service Vulnerability","description":"Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96866","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96861","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96857-windows-projected-file-system-information-disclosure-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96857 Windows Projected File System Information Disclosure Vulnerability","description":"Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96857","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70084","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96859-windows-imaging-component-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96859 Windows Imaging Component Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96859","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96860-windows-usb-print-driver-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96860 Windows USB Print Driver Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96860","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69452-windows-enterprise-app-management-elevation-of-privilege-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69452 Windows Enterprise App Management Elevation of Privilege Vulnerability","description":"Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69452","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97782-microsoft-office-sharepoint-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97782 Microsoft Office SharePoint Tampering Vulnerability","description":"Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97782","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97794-windows-container-isolation-fs-filter-driver-unionfs-sys-elevatio","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97794 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97794","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97787","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97792","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102202","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97810","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-59116-windows-remote-desktop-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-59116 Windows Remote Desktop Security Feature Bypass Vulnerability","description":"Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59116","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-62879-windows-smartscreen-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-62879 Windows SmartScreen Tampering Vulnerability","description":"Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62879","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-62687-windows-backup-engine-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-62687 Windows Backup Engine Information Disclosure Vulnerability","description":"Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62687","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69999-windows-update-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69999 Windows Update Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69999","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70055-windows-cryptographic-services-information-disclosure-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70055 Windows Cryptographic Services Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70055","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69919","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70074-windows-dns-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70074 Windows DNS Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70074","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70075-windows-virtualization-based-security-vbs-enclave-security-featur","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70075 Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability","description":"Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70075","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69736-windows-credential-manager-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69736 Windows Credential Manager Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69736","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-67626-microsoft-sql-server-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-67626 Microsoft SQL Server Denial of Service Vulnerability","description":"Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67626","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88084","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-67628-microsoft-sql-server-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-67628 Microsoft SQL Server Information Disclosure Vulnerability","description":"Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67628","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88081","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85888","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88086","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69640-windows-key-distribution-center-security-feature-bypass-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69640 Windows Key Distribution Center Security Feature Bypass Vulnerability","description":"Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69640","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69577-microsoft-azure-attestation-service-and-device-health-attestation","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69577 Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability","description":"Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69577","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69454","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-78459-microsoft-internet-information-services-elevation-of-privilege-vu","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-78459 Microsoft Internet Information Services Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78459","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83507-windows-update-orchestrator-service-information-disclosure-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83507 Windows Update Orchestrator Service Information Disclosure Vulnerability","description":"Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83507","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83933","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83522-windows-ike-extension-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83522 Windows IKE Extension Spoofing Vulnerability","description":"Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83522","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83565-windows-encrypting-file-system-efs-information-disclosure-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83565 Windows Encrypting File System (EFS) Information Disclosure Vulnerability","description":"Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83565","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83683","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83573-windows-kernel-mode-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83573 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","description":"Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83573","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83582-windows-graphics-kernel-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83582 Windows Graphics Kernel Information Disclosure Vulnerability","description":"Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83582","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83588-windows-usb-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83588 Windows USB Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83588","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83638","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83639-windows-sensor-data-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83639 Windows Sensor Data Service Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83639","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83659-windows-user-profile-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83659 Windows User Profile Service Elevation of Privilege Vulnerability","description":"Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83659","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83664-windows-portable-device-file-system-driver-information-disclosure","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83664 Windows Portable Device File System Driver Information Disclosure Vulnerability","description":"Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83664","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83668-windows-wlan-service-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83668 Windows WLAN Service Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83668","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83670-function-discovery-service-fdwsd-dll-information-disclosure-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83670 Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability","description":"Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83670","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83677-windows-dhcp-client-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83677 Windows DHCP Client Denial of Service Vulnerability","description":"Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83677","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83679-windows-defender-firewall-service-elevation-of-privilege-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83679 Windows Defender Firewall Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83679","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83703-windows-wi-fi-driver-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83703 Windows Wi-Fi Driver Denial of Service Vulnerability","description":"Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83703","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83709-windows-ntlm-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83709 Windows NTLM Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83709","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83721-win32k-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83721 Win32k Elevation of Privilege Vulnerability","description":"Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83721","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83732","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83757","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83762","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83728-windows-hyper-v-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83728 Windows Hyper-V Spoofing Vulnerability","description":"Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83728","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83765-windows-dwm-core-library-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83765 Windows DWM Core Library Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83765","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83763-windows-input-system-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83763 Windows Input System Elevation of Privilege Vulnerability","description":"Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83763","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83766-windows-hyper-v-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83766 Windows Hyper-V Security Feature Bypass Vulnerability","description":"Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83766","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87705","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83773-windows-midi-service-module-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83773 Windows MIDI Service Module Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83773","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83777-windows-bluetooth-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83777 Windows Bluetooth Service Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83777","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83788-windows-rndismp6-sys-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83788 Windows rndismp6.sys Information Disclosure Vulnerability","description":"Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83788","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83789-windows-smb-client-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83789 Windows SMB Client Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83789","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83791-windows-virtual-input-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83791 Windows Virtual Input Elevation of Privilege Vulnerability","description":"Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83791","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83792-windows-device-install-service-elevation-of-privilege-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83792 Windows Device Install Service Elevation of Privilege Vulnerability","description":"Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83792","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83794-windows-portable-device-mtp-driver-information-disclosure-vulnera","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83794 Windows Portable Device MTP Driver Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83794","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83835-windows-common-log-file-system-driver-information-disclosure-vuln","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83835 Windows Common Log File System Driver Information Disclosure Vulnerability","description":"Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83835","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83845-windows-internet-wininet-dll-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83845 Windows Internet (wininet.dll) Spoofing Vulnerability","description":"Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83845","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83860-windows-gdi-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83860 Windows GDI Denial of Service Vulnerability","description":"Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83860","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83861-windows-remote-desktop-protocol-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83861 Windows Remote Desktop Protocol Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83861","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96322","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83870-windows-aggregated-data-platform-service-information-disclosure-v","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83870 Windows Aggregated Data Platform Service Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83870","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83877-windows-devices-human-interface-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83877 Windows Devices Human Interface Elevation of Privilege Vulnerability","description":"Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83877","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85872-windows-storage-vsp-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85872 Windows Storage VSP Driver Elevation of Privilege Vulnerability","description":"Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85872","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83905-windows-shell-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83905 Windows Shell Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83905","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85905-windows-ui-immersive-server-api-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85905 Windows UI Immersive Server API Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85905","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85910-windows-staterepository-api-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85910 Windows StateRepository API Information Disclosure Vulnerability","description":"Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85910","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83915-windows-diagnostic-policy-service-elevation-of-privilege-vulnerab","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83915 Windows Diagnostic Policy Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83915","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-62840-linux-kernel-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-62840 Linux Kernel Elevation of Privilege Vulnerability","description":"Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62840","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85884-windows-health-and-optimized-experiences-service-elevation-of-pri","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85884 Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability","description":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85884","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85943-reliable-multicast-transport-driver-rmcast-elevation-of-privilege","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85943 Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability","description":"Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85943","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87699-winlogon-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87699 Winlogon Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87699","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87709-windows-host-guardian-service-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87709 Windows Host Guardian Service Tampering Vulnerability","description":"Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87709","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87698-windows-remote-access-service-infrastructure-information-disclosu","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87698 Windows Remote Access Service Infrastructure Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87698","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88072-windows-host-guardian-service-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88072 Windows Host Guardian Service Elevation of Privilege Vulnerability","description":"Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88072","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-87702-windows-resource-management-mrm-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-87702 Windows Resource Management (MRM) Elevation of Privilege Vulnerability","description":"Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87702","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88127-windows-smb-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88127 Windows SMB Server Elevation of Privilege Vulnerability","description":"Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88127","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88147-windows-secure-socket-tunneling-protocol-sstp-elevation-of-privil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88147 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88147","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88133-windows-portable-device-enumerator-service-elevation-of-privilege","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88133 Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability","description":"Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88133","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88193-microsoft-scripting-engine-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88193 Microsoft Scripting Engine Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88193","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69884-windows-gdi-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69884 Windows GDI Elevation of Privilege Vulnerability","description":"Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69884","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70054-windows-netbios-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70054 Windows NetBIOS Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70054","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85922-azure-key-vault-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability","description":"Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85925-azure-key-vault-client-sdk-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability","description":"Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85925","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70184-windows-backup-engine-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70184 Windows Backup Engine Elevation of Privilege Vulnerability","description":"Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70184","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108135","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70260-microsoft-trace-data-helper-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70260 Microsoft Trace Data Helper Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70260","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70261","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-70279-microsoft-exchange-server-spoofing-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-70279 Microsoft Exchange Server Spoofing Vulnerability","description":"Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70279","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-77910-microsoft-exchange-server-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-77910 Microsoft Exchange Server Elevation of Privilege Vulnerability","description":"Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77910","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87692","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87695","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87696","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-83746-skype-for-business-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-83746 Skype for Business Elevation of Privilege Vulnerability","description":"Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83746","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85873","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88075-configuration-manager-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88075 Configuration Manager Elevation of Privilege Vulnerability","description":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.995Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88092-asp-net-core-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88092 ASP.NET Core Tampering Vulnerability","description":"Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96188-microsoft-powertoys-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96188 Microsoft PowerToys Elevation of Privilege Vulnerability","description":"External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96188","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96206-windows-subsystem-for-linux-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96206 Windows Subsystem for Linux Information Disclosure Vulnerability","description":"Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96206","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96243-windows-walletservice-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96243 Windows WalletService Elevation of Privilege Vulnerability","description":"Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96243","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96300-rpc-endpoint-mapper-service-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96300 RPC Endpoint Mapper Service Denial of Service Vulnerability","description":"Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96300","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96850-windows-modern-device-management-mdm-information-disclosure-vulne","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96850 Windows Modern Device Management (MDM) Information Disclosure Vulnerability","description":"Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96850","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96858-windows-security-account-manager-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96858 Windows Security Account Manager Tampering Vulnerability","description":"Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96858","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96912-windows-client-license-service-elevation-of-privilege-vulnerabili","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96912 Windows Client License Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96912","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100201","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96923-windows-workstation-service-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96923 Windows Workstation Service Elevation of Privilege Vulnerability","description":"Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96923","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-69675-windows-network-file-system-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-69675 Windows Network File System Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69675","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102186","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-85866-windows-alpc-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-85866 Windows ALPC Information Disclosure Vulnerability","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85866","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-88094-azure-storage-library-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability","description":"Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88094","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96944-windows-storage-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96944 Windows Storage Information Disclosure Vulnerability","description":"Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96944","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96948-windows-client-side-caching-driver-csc-sys-information-disclosure","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96948 Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability","description":"Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96948","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96951-windows-shell-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability","description":"Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97788-active-directory-federation-services-ad-fs-information-disclosure","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97788 Active Directory Federation Services (AD FS) Information Disclosure Vulnerability","description":"Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97788","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97790-windows-container-isolation-fs-filter-driver-unionfs-sys-tamperin","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97790 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability","description":"Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97790","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97793-windows-setup-and-deployment-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97793 Windows Setup and Deployment Elevation of Privilege Vulnerability","description":"Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97793","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-96209-windows-network-file-system-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-96209 Windows Network File System Elevation of Privilege Vulnerability","description":"Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96209","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102198-windows-remote-desktop-protocol-information-disclosure-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102198 Windows Remote Desktop Protocol Information Disclosure Vulnerability","description":"Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102198","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102199-microsoft-windows-codecs-library-denial-of-service-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102199 Microsoft Windows Codecs Library Denial of Service Vulnerability","description":"Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102199","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102204-microsoft-microsoft-defender-for-endpoint-elevation-of-privilege","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102204 Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability","description":"Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102204","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102206-windows-portable-device-mtp-driver-elevation-of-privilege-vulner","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102206 Windows Portable Device MTP Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102206","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102221-secure-boot-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102221 Secure Boot Security Feature Bypass Vulnerability","description":"No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102221","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102220-windows-vhd-miniport-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102220 Windows VHD miniport driver Elevation of Privilege Vulnerability","description":"Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102220","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102226-dynamics-business-central-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102226 Dynamics Business Central Elevation of Privilege Vulnerability","description":"Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102226","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-102869-net-and-visual-studio-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-102869 .NET and Visual Studio Elevation of Privilege Vulnerability","description":"Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-109453-virtual-hard-disk-vhd-miniport-driver-elevation-of-privilege-vul","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-109453 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109453","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103555","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-103568-windows-credential-providers-elevation-of-privilege-vulnerabilit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-103568 Windows Credential Providers Elevation of Privilege Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103568","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-103577-microsoft-quic-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-103577 Microsoft QUIC Security Feature Bypass Vulnerability","description":"Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103577","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105003-hid-class-driver-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105003 HID Class Driver Elevation of Privilege Vulnerability","description":"Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105003","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105006","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97804","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-105007-windows-ndis-elevation-of-privilege-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-105007 Windows NDIS Elevation of Privilege Vulnerability","description":"An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.\n\nTo exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to e…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105007","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97798-windows-error-reporting-service-elevation-of-privilege-vulnerabil","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97798 Windows Error Reporting Service Elevation of Privilege Vulnerability","description":"Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97798","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-adv990001-latest-servicing-stack-updates","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"ADV990001 Latest Servicing Stack Updates","description":"Advisory updated to announce new versions of Servicing Stack Updates are available.  Please see the FAQ for details.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/ADV990001","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97817-role-dns-server-information-disclosure-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97817 Role: DNS Server Information Disclosure Vulnerability","description":"Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97817","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97819","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97820","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97821","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97822","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97823","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97824","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97825","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97826","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97827","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97828","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97829","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97831","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97832","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97833","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97834","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97835","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97836","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97837","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97838","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97839","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97840","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97841","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97842","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97843","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97844","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108127","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108128","label":"Microsoft MSRC","domainType":"primary"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108129","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97830-windows-internet-information-services-denial-of-service-vulnerabi","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97830 Windows Internet Information Services Denial of Service Vulnerability","description":"Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97830","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-108463-windows-smartscreen-security-feature-bypass-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-108463 Windows SmartScreen Security Feature Bypass Vulnerability","description":"Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108463","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-97801-net-framework-tampering-vulnerability","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-97801 .NET Framework Tampering Vulnerability","description":"Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97801","label":"Microsoft MSRC","domainType":"primary"}],"feedLabel":null},{"id":"vendor-ssa-580366-v1-2-last-update-2026-10-19-dll-sideloading-vulnerability-in-siemens-","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"SSA-580366 V1.2 (Last Update: 2026-10-19): DLL Sideloading Vulnerability in Siemens Software Center","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-580366.html","label":"Siemens ProductCERT","domainType":"other"}],"feedLabel":null},{"id":"vendor-ssa-580366-v1-1-last-update-2026-10-17-dll-sideloading-vulnerability-in-siemens-","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"SSA-580366 V1.1 (Last Update: 2026-10-17): DLL Sideloading Vulnerability in Siemens Software Center","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-580366.html","label":"Siemens ProductCERT","domainType":"other"}],"feedLabel":null},{"id":"vendor-ssa-580366-v1-0-dll-sideloading-vulnerability-in-siemens-software-center","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"SSA-580366 V1.0: DLL Sideloading Vulnerability in Siemens Software Center","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T00:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-580366.html","label":"Siemens ProductCERT","domainType":"other"}],"feedLabel":null},{"id":"vendor-the-q3-vulnerability-pulse-discovery-exploitation","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"The Q3 Vulnerability Pulse: Discovery ≠ Exploitation","description":"Is the cybersecurity world really facing a \"Bugmageddon?\" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://blog.talosintelligence.com/the-q3-vulnerability-pulse-discovery-exploitation/","label":"Cisco Talos","domainType":"other"}],"feedLabel":null},{"id":"vendor-break-the-silence-kazakhstan-nexus-uat-6275-targets-cis-government-organizations","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations","description":"Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://blog.talosintelligence.com/break-the-silence-kazakhstan-nexus-uat-6275-targets-cis-government-organizations/","label":"Cisco Talos","domainType":"other"}],"feedLabel":null},{"id":"vendor-microsoft-patch-tuesday-for-october-2026-snort-rules-and-prominent-vulnerabiliti","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities","description":"Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as \"critical.\"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T20:37:58.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-october-2026/","label":"Cisco Talos","domainType":"other"}],"feedLabel":null},{"id":"vendor-arbitrary-file-write-in-grpc-phquerymaster","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Arbitrary file write in grpc phQueryMaster","description":"CVSSv3 Score:\n \n 9.4\n\n\n An Improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] in FortiSIEM may allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets.\n\n\n \n  Revised on 2026-10-13 00:00:00","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-180","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-broken-authorization","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Broken authorization","description":"CVSSv3 Score:\n \n 3.4\n\n\n A missing authorization vulnerability [CWE-862] in FortiSIEM GUI may allow an authenticated attacker to execute unauthorized code or commands  via Specially crafted HTTP requests\n\n\n \n  Revised on 2026-10-13 00:00:00","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-183","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-double-free-in-signal-handler","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Double free in signal handler","description":"CVSSv3 Score:\n \n 2.1\n\n\n A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.\n\n\n \n  Revised on 2026-10-13 00:00:00","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-182","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-fabric-api-authentication-bypass","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Fabric API Authentication bypass","description":"CVSSv3 Score:\n \n 4.9\n\n\n A Use of Hard-coded Cryptographic Key [CWE-321] in FortiSandbox and FortiSandbox Cloud API may allow an unauthenticated attacker to access some endpoints via specially crafted HTTP requests\n\n\n \n  Revised on 2026-10-13 00:00:00","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-179","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-gui-denial-of-service","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"GUI Denial of Service","description":"CVSSv3 Score:\n \n 6.7\n\n\n An Improper Locking vulnerability [CWE-667] in FortiOS may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.\n\n\n \n  Revised on 2026-10-13 00:00:00","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-181","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-improper-access-control-and-session-management-in-the-web-management-interface","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Improper access control and session management in the web management interface","description":"CVSSv3 Score:\n \n 9.6\n\n\n An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiSandbox GUI may allow a remote unauthenticated attacker to bypass authentication via crafted HTTP requests.\n\n\n \n  Revised on 2026-10-13 00:00:00","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-185","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-multiple-arbitrary-file-read-write-via-sql-injection","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Multiple Arbitrary File Read/Write via SQL Injection","description":"CVSSv3 Score:\n \n 7.9\n\n\n An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests.…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-178","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-persistent-denial-of-service-in-admin-profile","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Persistent Denial of Service in Admin Profile","description":"CVSSv3 Score:\n \n 4.8\n\n\n An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.\n\n\n \n  Revised on 2026-10-13 00:00:00","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.996Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-176","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-sql-command-injection-in-webmail","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"SQL command injection in webmail","description":"CVSSv3 Score:\n \n 7.7\n\n\n An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.\n\n\n \n  Revised on 2026-10-13…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-184","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-arbitrary-command-execution-in-fgfmsd-daemon","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"arbitrary command execution in fgfmsd daemon","description":"CVSSv3 Score:\n \n 5.3\n\n\n An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiManager fgfmd daemon may allow a remote attacker impersonating a fortimanager cluster node to execute unauthorized code or commands via specially craft…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-177","label":"Fortinet PSIRT","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0307-globalprotect-app-local-privilege-escalation-vulnerabilities-sever","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T00:55:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0307","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0317-pan-os-denial-of-service-vulnerability-severity-low","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:30:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0317","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0320-pan-os-authenticated-admin-command-injection-vulnerability-severit","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:30:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0320","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0321-pan-os-denial-of-service-dos-vulnerabilities-in-network-services-s","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T18:30:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0321","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0313-cortex-xsoar-os-command-injection-vulnerability-severity-medium","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0313","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0314-globalprotect-app-local-denial-of-service-dos-on-windows-severity-","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0314","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0312-checkov-by-prisma-cloud-path-traversal-vulnerabilities-severity-me","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0312","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0316-pan-os-stored-cross-site-scripting-xss-vulnerability-severity-low","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0316","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0315-globalprotect-app-local-privilege-escalation-vulnerability-on-maco","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0315","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-pan-sa-2026-0013-chromium-monthly-vulnerability-update-october-2026-severity-hig","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/PAN-SA-2026-0013","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0318-pan-os-denial-of-service-dos-on-panorama-severity-medium","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0318","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0311-checkov-by-prisma-cloud-server-side-request-forgery-vulnerability-","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0311","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-cve-2026-0319-pan-os-improper-input-handling-vulnerability-severity-medium","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM)","description":"","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T16:00:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0319","label":"Palo Alto Networks","domainType":"primary"}],"feedLabel":null},{"id":"vendor-sd1801-1732e-armorblock-multiple-vulnerabilities","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"SD1801 | 1732E ArmorBlock® - Multiple Vulnerabilities","description":"CVE-2026-12655: CVSS v4.0 8.8, CVSS v3.1 9.1 | https://cveawg.mitre.org/api/cve/CVE-2026-12655CVE-2026-12656: CVSS v4.0 8.7, CVSS v3.1 7.5 | https://cveawg.mitre.org/api/cve/CVE-2026-12656Published Date: Tue Oct 13 12:35:00 UTC 2026","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T12:35:00.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1801.html","label":"Rockwell Automation","domainType":"primary"}],"feedLabel":null},{"id":"vendor-ot-visibility-without-the-trade-off-how-waterfall-siemens-energy-are-securing-cr","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"OT Visibility Without the Trade-Off: How Waterfall & Siemens Energy are Securing Critical Infrastructure together","description":"Lior Frenkel on the joint Waterfall and Siemens Energy MDR solution: real-time OT visibility through Unidirectional Gateways, with no path back into the systems.\nThe post OT Visibility Without the Trade-Off: How Waterfall & Siemens Energy are Securing Critical Infrastructure together appeared first…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T08:38:46.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://waterfall-security.com/ot-insights-center/ot-cybersecurity-insights-center/ot-visibility-waterfall-siemens-energy/","label":"Waterfall Security","domainType":"other"}],"feedLabel":null},{"id":"vendor-dispel-zero-trust-engine-for-oems-to-secure-remote-industrial-service-standardiz","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Dispel Zero Trust Engine for OEMs to secure remote industrial service, standardize access, strengthen compliance","description":"Dispel announced the launch of Dispel Zero Trust Engine for OEMs, a solution purpose-built for OEMs and machine...\nThe post Dispel Zero Trust Engine for OEMs to secure remote industrial service, standardize access, strengthen compliance appeared first on Industrial Cyber.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:34:17.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/news/dispel-zero-trust-engine-for-oems-to-secure-remote-industrial-service-standardize-access-strengthen-compliance/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-need-for-enforceable-ai-accountability-zero-trust-security-as-ai-driven-cyber-ri","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Need for enforceable AI accountability, zero-trust security as AI-driven cyber risks threaten critical infrastructure","description":"As artificial intelligence introduces new cybersecurity risks, traditional frameworks must evolve to address AI-enabled cybercrime, models escaping their...\nThe post Need for enforceable AI accountability, zero-trust security as AI-driven cyber risks threaten critical infrastructure appeared first o…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:04:46.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/zero-trust/need-for-enforceable-ai-accountability-zero-trust-security-as-ai-driven-cyber-risks-threaten-critical-infrastructure/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-claroty-team82-shows-ai-can-rebuild-danfoss-controller-exploits-in-28-minutes-pu","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes, putting Internet-facing OT at risk","description":"Claroty’s Team82 research team reproduced three previously disclosed vulnerabilities in Danfoss AK-SM 800A refrigeration controllers using an artificial...\nThe post Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes, putting Internet-facing OT at risk appeared first on Ind…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:00:23.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/ai/claroty-team82-shows-ai-can-rebuild-danfoss-controller-exploits-in-28-minutes-putting-internet-facing-ot-at-risk/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-unit-42-traces-peerstitch-malware-deployment-to-fortios-vulnerability-exploited-","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise","description":"Palo Alto Networks’ Unit 42 threat intelligence team uncovered a multistage cyber intrusion against a telecommunications managed service...\nThe post Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise appeared first on Industrial Cyber.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:57:51.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/ransomware/unit-42-traces-peerstitch-malware-deployment-to-fortios-vulnerability-exploited-after-fortimanager-compromise/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-nozomi-outlines-it-and-ot-security-priorities-ahead-of-india-s-april-2027-cea-po","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Nozomi outlines IT and OT security priorities ahead of India’s April 2027 CEA power sector cybersecurity deadline","description":"Following the July move by India’s Central Electricity Authority (CEA) that notified the Central Electricity Authority (Cyber Security...\nThe post Nozomi outlines IT and OT security priorities ahead of India’s April 2027 CEA power sector cybersecurity deadline appeared first on Industrial Cyber.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:52:21.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/utilities-energy-power-water-waste/nozomi-outlines-it-and-ot-security-priorities-ahead-of-indias-april-2027-cea-power-sector-cybersecurity-deadline/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-singapore-prioritizes-critical-infrastructure-in-quantum-safe-push-funds-cryptog","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Singapore prioritizes critical infrastructure in quantum-safe push, funds cryptographic discovery, legacy OT migration","description":"The Cyber Security Agency of Singapore (CSA) issued quantum-safe migration guidance recommending that organizations exposed to quantum-related cybersecurity...\nThe post Singapore prioritizes critical infrastructure in quantum-safe push, funds cryptographic discovery, legacy OT migration appeared fir…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:25:41.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/critical-infrastructure/singapore-prioritizes-critical-infrastructure-in-quantum-safe-push-funds-cryptographic-discovery-legacy-ot-migration/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-mitre-att-ck-v20-expands-critical-infrastructure-threat-coverage-with-new-it-and","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"MITRE ATT&CK v20 expands critical infrastructure threat coverage with new IT and OT attack techniques","description":"Not-for-profit organization MITRE has released details of version 20 of its ATT&CK framework, expanding its coverage of critical...\nThe post MITRE ATT&CK v20 expands critical infrastructure threat coverage with new IT and OT attack techniques appeared first on Industrial Cyber.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:21:13.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/industrial-cyber-attacks/mitre-attck-v20-expands-critical-infrastructure-threat-coverage-with-new-it-and-ot-attack-techniques/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-french-supermarket-cyberattack-exposes-risks-of-unsecured-remote-access-and-lega","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"French supermarket cyberattack exposes risks of unsecured remote access and legacy refrigeration systems","description":"Following reports of cyberattacks on French supermarket refrigeration systems that disrupted hundreds of stores overnight from Oct. 11...\nThe post French supermarket cyberattack exposes risks of unsecured remote access and legacy refrigeration systems appeared first on Industrial Cyber.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:16:57.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/control-device-security/french-supermarket-cyberattack-exposes-risks-of-unsecured-remote-access-and-legacy-refrigeration-systems/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"vendor-ampyx-cyber-examines-ferc-2026-cip-audit-findings-on-generator-registration-shar","source":"vendor-blogs","category":"advisory","severity":"unknown","title":"Ampyx Cyber examines FERC 2026 CIP audit findings on generator registration, shared control and AI access risks","description":"Ampyx Cyber highlighted gaps in generator registration, cyber risk categorization and artificial intelligence (AI) access controls in the...\nThe post Ampyx Cyber examines FERC 2026 CIP audit findings on generator registration, shared control and AI access risks appeared first on Industrial Cyber.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:11:31.000Z","fetchedAt":"2026-10-20T03:00:13.997Z","references":[{"url":"https://industrialcyber.co/utilities-energy-power-water-waste/ampyx-cyber-examines-ferc-2026-cip-audit-findings-on-generator-registration-shared-control-and-ai-access-risks/","label":"Industrial Cyber","domainType":"other"}],"feedLabel":null},{"id":"news-nikkei-discloses-third-data-breach-in-a-month-1-8m-records-exposed","source":"general-news","category":"news","severity":"unknown","title":"Nikkei discloses third data breach in a month, 1.8M records exposed","description":"Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T21:49:48.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/nikkei-discloses-third-data-breach-in-a-month-18m-records-exposed/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-hijack-aomei-update-servers-to-secretly-spread-malware","source":"general-news","category":"news","severity":"unknown","title":"Hackers hijack AOMEI update servers to secretly spread malware","description":"Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:40:58.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/hackers-hijack-aomei-update-servers-to-secretly-spread-malware/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-bullhorn-takes-staffing-platform-offline-to-contain-cyberattack","source":"general-news","category":"news","severity":"unknown","title":"Bullhorn takes staffing platform offline to contain cyberattack","description":"Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:51:13.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/bullhorn-takes-staffing-platform-offline-to-contain-cyberattack/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-opencode-hack-exposes-api-keys-amid-ai-distillation-attacks","source":"general-news","category":"news","severity":"unknown","title":"OpenCode hack exposes API keys amid AI distillation attacks","description":"The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:27:15.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-microsoft-fixes-game-app-crashes-caused-by-recent-windows-update","source":"general-news","category":"news","severity":"unknown","title":"Microsoft fixes game, app crashes caused by recent Windows update","description":"Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:55:23.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-game-app-crashes-caused-by-windows-kb5124010-preview-update/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-f5-releases-out-of-band-patches-for-critical-nginx-vulnerabilities","source":"general-news","category":"news","severity":"unknown","title":"F5 releases out-of-band patches for critical NGINX vulnerabilities","description":"F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:49:24.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/f5-releases-out-of-band-patches-for-critical-nginx-vulnerabilities/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-microsoft-october-windows-server-updates-break-exchange-sign-in-mail-flow","source":"general-news","category":"news","severity":"unknown","title":"Microsoft: October Windows Server updates break Exchange sign-in, mail flow","description":"Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T08:58:41.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-october-windows-server-updates-cause-exchange-issues/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-exploit-siteguard-waf-flaw-to-run-commands-as-admins","source":"general-news","category":"news","severity":"unknown","title":"Hackers exploit SiteGuard WAF flaw to run commands as admins","description":"Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T14:23:16.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers","source":"general-news","category":"news","severity":"unknown","title":"Critical BlockStrap flaw lets hackers run code on Magento servers","description":"Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T20:00:59.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-targeted-ads-installed-candiru-spyware-in-zero-click-attacks","source":"general-news","category":"news","severity":"unknown","title":"Targeted ads installed Candiru spyware in zero-click attacks","description":"Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...]","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:20:03.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/","label":"BleepingComputer","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-exploit-plex2shell-flaws-to-install-crypto-miners-and-linux-proxy-backdo","source":"general-news","category":"news","severity":"unknown","title":"Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor","description":"Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public.\n\nAccording to a researcher who goes by the online alias boredhackerblog, the exploitation activity involve…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T17:32:13.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/hackers-exploit-plex2shell-flaws-to.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-popular-wordpress-seo-plugin-rank-math-pro-hijacked-to-deliver-self-restoring-ba","source":"general-news","category":"news","severity":"unknown","title":"Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor","description":"Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16.\n\nAny site th…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:28:47.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-from-email-to-case-to-the-boardroom-how-inherited-agents-break-governance-built-","source":"general-news","category":"news","severity":"unknown","title":"From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software","description":"In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, Email-to-Case and Web-to-Case turn inbound customer messages into case records; it is how airlines and h…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:50:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/from-email-to-case-to-boardroom-how.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-fake-web3-accelerator-uses-npm-packages-to-spread-malware-and-hijack-ai-agent-tr","source":"general-news","category":"news","severity":"unknown","title":"Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic","description":"A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits.\n\n\"The tool…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:06:40.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-unpatched-broadcom-wi-fi-flaw-lets-attackers-in-range-run-code-as-root-on-router","source":"general-news","category":"news","severity":"unknown","title":"Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers","description":"A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16.\n\nHe showed the attack working against home gateways supplied by thre…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:29:44.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/unpatched-broadcom-wi-fi-flaw-lets.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-opencode-console-breach-may-have-exposed-openai-anthropic-and-google-api-keys","source":"general-news","category":"news","severity":"unknown","title":"OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys","description":"An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.\n\nConsole is OpenCode's optional hosted service: a workspace saves its own OpenAI, Anthropic, or Google key ther…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T06:07:08.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/opencode-console-breach-may-have.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-suspends-cloud-backup-after-attackers-compromise-microsoft-365-tenan","source":"general-news","category":"news","severity":"unknown","title":"ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants","description":"ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.\n\nThe disabled identities are liste…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-18T08:23:02.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-t","source":"general-news","category":"news","severity":"unknown","title":"Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants","description":"Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments.\n\nConnectWise C…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-17T06:16:46.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-researchers-demonstrate-openbsd-root-exploit-chaining-37-year-old-shared-memory-","source":"general-news","category":"news","severity":"unknown","title":"Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug","description":"A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections.Security firm Calif, which found and reporte…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T17:48:45.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-attackers-tampered-with-aomei-backupper-s-update-servers-for-minutes-to-deliver-","source":"general-news","category":"news","severity":"unknown","title":"Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor","description":"Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and ru…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T16:43:39.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-openai-research-model-spent-3rd-party-test-eth-without-permission-to-deploy-smar","source":"general-news","category":"news","severity":"unknown","title":"OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract","description":"OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party's wallet without authorization to com…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T14:03:04.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/openai-research-model-spent-3rd-party.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-cert-in-warns-ai-agents-accessed-sensitive-data-at-indian-organizations-during-t","source":"general-news","category":"news","severity":"unknown","title":"CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing","description":"AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15.\n\nThe agents went beyond their assigned tasks, and none of the organizations detected the unauthorize…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T06:53:09.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-peerstitch-malware-deployed-via-fortios-flaw-bypasses-checks-on-tagged-vpn-sessi","source":"general-news","category":"news","severity":"unknown","title":"PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions","description":"A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.\n\nThe attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command lin…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T04:59:36.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-critical-pwnescape-linux-kernel-vulnerability-lets-guest-vms-read-host-memory","source":"general-news","category":"news","severity":"unknown","title":"Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory","description":"A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it.\n\nThe flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T20:24:36.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/critical-pwnescape-linux-kernel.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-citizen-lab-traces-zero-click-candiru-spyware-infections-at-al-jazeera-to-target","source":"general-news","category":"news","severity":"unknown","title":"Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads","description":"Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.\n\nThe hidden attack code ran the moment an ad loaded on t…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:01:57.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/citizen-lab-traces-zero-click-candiru.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-silent-lynx-exploits-winrar-flaw-to-deploy-reverse-shell-in-cis-government-attac","source":"general-news","category":"news","severity":"unknown","title":"Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks","description":"The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).\n\nThe activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enab…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T16:00:26.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/silent-lynx-exploits-winrar-flaw-to.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-fake-ai-attacks-spread-across-us-companies-how-mssps-can-stop-incidents-early","source":"general-news","category":"news","severity":"unknown","title":"Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early","description":"Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. \n\nThe campaigns also increase operational pressure on MSSPs serving US…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:46:59.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/fake-ai-attacks-spread-across-us.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-why-ai-confidence-is-not-validation","source":"general-news","category":"news","severity":"unknown","title":"Why AI Confidence Is Not Validation","description":"AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it. Without governance models and validati…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:04:35.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/why-ai-confidence-is-not-validation.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-ghostaction-compromises-about-1-900-github-accounts-targets-over-30-000-reposito","source":"general-news","category":"news","severity":"unknown","title":"GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories","description":"The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations.\n\nThe spike, according to GitGuardian, was observed on October 8 and 9, 2026.\n\n\"This resulted from compromising the GitHub accounts of about 1,900 users. It…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T08:45:10.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/ghostaction-compromises-about-1900.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-ahsaycbs-flaws-exploited-to-deploy-web-shells-get-new-fixes-after-incomplete-pat","source":"general-news","category":"news","severity":"unknown","title":"AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches","description":"Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners.\n\nThe vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T06:43:08.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/ahsaycbs-flaws-exploited-to-deploy-web.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-cisco-warns-of-active-attacks-exploiting-new-critical-secure-email-gateway-vulne","source":"general-news","category":"news","severity":"unknown","title":"Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability","description":"Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday.\n\nThe attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could then…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T18:38:56.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-hackers-backdoor-nextcloud-servers-through-critical-flaw-in-collabora-s-built-in","source":"general-news","category":"news","severity":"unknown","title":"Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App","description":"Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.\n\nA web shell is a small file that executes any command an attac…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T17:38:31.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-curl-patches-http-2-upload-flaw-after-poc-demonstrates-client-side-code-executio","source":"general-news","category":"news","severity":"unknown","title":"curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution","description":"A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine.\n\nThe curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact kn…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T12:13:36.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/curl-patches-http2-upload-flaw-after.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-researchers-used-a-public-openai-model-to-build-a-250-000-chrome-full-chain-expl","source":"general-news","category":"news","severity":"unknown","title":"Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days","description":"A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said.\n\nIts researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:19:02.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-hirudo-android-trojan-uses-patched-banking-apps-to-bypass-their-built-in-securit","source":"general-news","category":"news","severity":"unknown","title":"Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks","description":"Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud. \n\nDutch mobil…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:08:22.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/hirudo-android-trojan-uses-patched.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-an-ai-agent-found-a-critical-otp-bypass-in-production-the-attack-was-the-easy-pa","source":"general-news","category":"news","severity":"unknown","title":"An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.","description":"The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part.\n\nTL;DR\n\n\n  During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own.\n  One login reques…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T11:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/an-ai-agent-found-critical-otp-bypass.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-ai-found-linux-kernel-flaw-gives-local-users-root-and-can-break-a-guest-out-to-t","source":"general-news","category":"news","severity":"unknown","title":"AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host","description":"A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine.\n\nThe…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:46:57.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-microsoft-patches-record-1-413-flaws-including-exploited-windows-shell-bug","source":"general-news","category":"news","severity":"unknown","title":"Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug","description":"Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation.\n\nThese include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Ser…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T04:34:43.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/microsoft-patches-record-1413-flaws.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-docker-fixes-critical-two-year-old-hub-flaw-that-let-one-user-push-images-as-ano","source":"general-news","category":"news","severity":"unknown","title":"Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another","description":"A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it.\n\nThe flaw was in the feature that converts a personal accou…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T18:03:18.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://thehackernews.com/2026/10/docker-fixes-critical-two-year-old-hub.html","label":"The Hacker News","domainType":"media"}],"feedLabel":null},{"id":"news-adfection-turns-ad-impressions-into-zero-click-spyware-delivery","source":"general-news","category":"news","severity":"unknown","title":"'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery","description":"Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:55:01.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/data-privacy/adfection-online-ads-spyware-delivery","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-disables-cloud-backups-amid-concerns-for-downstream-msps","source":"general-news","category":"news","severity":"unknown","title":"ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs","description":"Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T19:19:33.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/identity-access-management-security/connectwise-disables-cloud-backups-downstream-msps","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-onlyfans-copyright-takedowns-expose-compromised-websites","source":"general-news","category":"news","severity":"unknown","title":"OnlyFans Copyright Takedowns Expose Compromised Websites","description":"Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what universities, government websites, and security teams need to think about…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:28:11.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/vulnerabilities-threats/onlyfans-copyright-takedowns-expose-compromised-websites","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-the-evolving-cybersecurity-lexicon-vulnerability-discovery-to-resilience","source":"general-news","category":"news","severity":"unknown","title":"The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience","description":"An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/vulnerabilities-threats/cybersecurity-lexicon-vulnerability-discovery-resilience","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-fake-claude-chatgpt-attacks-surge-putting-developers-at-risk","source":"general-news","category":"news","severity":"unknown","title":"Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk","description":"Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T19:49:30.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-when-ai-agents-commit-breaches-humans-may-not-be-held-liable","source":"general-news","category":"news","severity":"unknown","title":"When AI Agents Commit Breaches, Humans May Not Be Held Liable","description":"As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T13:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/insider-threats/ai-agents-breaches-humans-liable","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-ai-slop-isn-t-just-for-social-media-it-s-ruining-cyberattacks-too","source":"general-news","category":"news","severity":"unknown","title":"AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too","description":"Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T20:43:20.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/threat-intelligence/ai-slop-ruining-cyberattacks","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-vulnerability-management-isn-t-about-the-score-it-s-about-how-it-applies-to-you","source":"general-news","category":"news","severity":"unknown","title":"Vulnerability Management Isn't About the Score — It's About How It Applies to You","description":"Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T15:17:18.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/cybersecurity-operations/vulnerability-management-isnt-about-the-score-its-about-how-it-applies-to-you","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-eu-grocers-pay-a-steep-price-for-unpatched-fridge-firmware","source":"general-news","category":"news","severity":"unknown","title":"EU Grocers Pay a Steep Price for Unpatched Fridge Firmware","description":"Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T07:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/ics-ot-security/eu-grocers-unpatched-fridge-firmware","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-anthropic-sneakpeek-flaw-is-a-silent-zero-click-threat","source":"general-news","category":"news","severity":"unknown","title":"Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat","description":"A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T20:09:42.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.darkreading.com/threat-intelligence/new-anthropic-sneakpeek-silent-zero-click-threat","label":"Dark Reading","domainType":"media"}],"feedLabel":null},{"id":"news-siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks","source":"general-news","category":"news","severity":"unknown","title":"Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks","description":"Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.\nThe post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T18:15:39.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-suspends-cloud-services-in-response-to-cyberattack","source":"general-news","category":"news","severity":"unknown","title":"ConnectWise Suspends Cloud Services in Response to Cyberattack","description":"The services remain unavailable as the company continues remediation and security validation.\nThe post ConnectWise Suspends Cloud Services in Response to Cyberattack appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:16:20.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/connectwise-suspends-cloud-services-in-response-to-cyberattack/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-plex2shell-exploit-chain-weaponized-against-plex-servers-hours-after-disclosure","source":"general-news","category":"news","severity":"unknown","title":"Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure","description":"Threat actors have been observed delivering cryptocurrency miners and proxy software.\nThe post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T12:44:39.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/plex2shell-exploit-chain-weaponized-against-plex-servers-hours-after-disclosure/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-one-compromised-login-exposed-millions-of-california-students-records","source":"general-news","category":"news","severity":"unknown","title":"One Compromised Login Exposed Millions of California Students’ Records","description":"Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.\nThe post One Compromised Login Exposed Millions of California Students’ Records appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:55:50.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/one-compromised-login-exposed-millions-of-california-students-records/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-exploited-fortinet-bug-linked-to-stealthy-fortigate-implant-in-telecom-hack","source":"general-news","category":"news","severity":"unknown","title":"Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack","description":"The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.\nThe post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T11:13:23.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.securityweek.com/exploited-fortinet-bug-linked-to-stealthy-fortigate-implant-in-telecom-hack/","label":"SecurityWeek","domainType":"media"}],"feedLabel":null},{"id":"news-exploited-vulnerabilities-typically-take-three-months-to-patch-moody-s-finds","source":"general-news","category":"news","severity":"unknown","title":"Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds","description":"Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:25:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/exploited-vulnerabilities-three/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-conduent-agrees-to-pay-80m-to-settle-data-breach-class-action","source":"general-news","category":"news","severity":"unknown","title":"Conduent Agrees to Pay $80m to Settle Data Breach Class Action","description":"The 2024 cyber incident affected the healthcare data of 62 million people, who launched a class action lawsuit against the business services firm","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T14:15:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/conduent-settle-data-breach-action/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-opencode-breach-could-affect-openai-anthropic-and-google","source":"general-news","category":"news","severity":"unknown","title":"OpenCode Breach Could Affect OpenAI, Anthropic and Google","description":"A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:30:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/opencode-breach-openai-anthropic/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-shuts-off-cloud-services-after-unauthorized-access-to-microsoft-365-","source":"general-news","category":"news","severity":"unknown","title":"ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants","description":"Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T10:30:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/connectwise-shuts-off-cloud/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-china-espionage-actor-actively-targeting-critical-beyondtrust-flaw-google-warns","source":"general-news","category":"news","severity":"unknown","title":"China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns","description":"The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T10:10:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/china-actor-beyondtrust-flaw-google/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-cyber-incident-at-bae-systems-disrupts-us-federal-bankruptcy-noticing","source":"general-news","category":"news","severity":"unknown","title":"Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing","description":"Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Systems","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T09:05:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/cyber-incident-bae-us-bankruptcy/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-france-internet-exposed-danfoss-controllers-drop-71-after-cyber-attack","source":"general-news","category":"news","severity":"unknown","title":"France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack","description":"France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T13:45:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/france-expose-danfoss-controllers/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-warning-over-high-risk-vulnerabilities-in-widely-used-llm-gateway-tool","source":"general-news","category":"news","severity":"unknown","title":"Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool","description":"CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T11:30:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/high-risk-vulnerabilities-llm-tool/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-romulus-malware-server-leverages-clickfix-to-deliver-multiple-payloads","source":"general-news","category":"news","severity":"unknown","title":"ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads\r\n","description":"Researchers at Forescout said the discovery shows how ClickFix is evolving from a delivery technique into full-blown cyber-criminal infrastructure","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/romulus-malware-clickfix-deliver/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-french-supermarket-cyber-attack-impacts-more-refrigeration-controllers","source":"general-news","category":"news","severity":"unknown","title":"French Supermarket Cyber-Attack Impacts More Refrigeration Controllers","description":"At least two French supermarkets using temperature regulation devices from Dixell Electronics also experienced food stock disruptions","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T09:30:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/french-supermarket-hack-more/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-microsoft-breaks-patch-tuesday-record-again-with-1400-cves","source":"general-news","category":"news","severity":"unknown","title":"Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs","description":"Microsoft issued its largest ever round of security updates in the October Patch Tuesday","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T08:45:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/microsoft-patch-tuesday-record-1/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-billion-dollar-companies-twice-as-likely-to-leave-critical-vulnerabilities-unpat","source":"general-news","category":"news","severity":"unknown","title":"Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched","description":"New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-14T07:55:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/companies-leave-critical/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-european-retail-firms-confirm-cyber-incidents","source":"general-news","category":"news","severity":"unknown","title":"European Retail Firms Confirm Cyber Incidents","description":"Several Europe-based retail firms have confirmed experiencing cyber incidents, while H&M said it is “investigating” such claims","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T14:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/retail-firms-confirm-cyber/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-uk-government-announces-sweeping-new-ai-security-plans","source":"general-news","category":"news","severity":"unknown","title":"UK Government Announces Sweeping New AI Security Plans ","description":"The government is planning tweaks to legislation, new incident response and more to head of AI security threats","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:45:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/uk-government-sweeping-ai-security/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-fifth-of-cisos-take-time-off-to-avoid-patch-tuesday","source":"general-news","category":"news","severity":"unknown","title":"Fifth of CISOs Take Time Off to Avoid Patch Tuesday  ","description":"Socura report claims CISOs are calling in sick or taking holiday to miss Patch Tuesday","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-13T09:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.infosecurity-magazine.com/news/fifth-cisos-take-time-off-avoid/","label":"InfoSecurity Magazine","domainType":"media"}],"feedLabel":null},{"id":"news-connectwise-suspends-cloud-backup-service-after-attackers-abuse-its-microsoft-36","source":"general-news","category":"news","severity":"unknown","title":"ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access","description":"American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised credential belonging to the ConnectWise Cloud Backup application, fo…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:33:57.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.helpnetsecurity.com/2026/10/19/connectwise-cloud-backup-suspended-security-incident/","label":"Help Net Security","domainType":"media"}],"feedLabel":null},{"id":"news-sweet-security-adds-one-click-protection-for-vulnerable-cloud-workloads","source":"general-news","category":"news","severity":"unknown","title":"Sweet Security adds one-click protection for vulnerable cloud workloads","description":"Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified. Security teams can enforce protection in one click while engineering develops, tests, and deploys a permanent f…","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T13:28:06.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://www.helpnetsecurity.com/2026/10/19/sweet-security-virtual-patching/","label":"Help Net Security","domainType":"media"}],"feedLabel":null},{"id":"news-ahold-delhaize-confirms-malicious-actions-behind-cyber-outages-affecting-grocery","source":"general-news","category":"news","severity":"unknown","title":"Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands","description":"Ahold Delhaize, the Dutch multinational grocery retailer, said Monday that a cyberattack forced it to take systems offline across most of its U.S. and European brands, impacting shoppers on both sides of the Atlantic.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T16:45:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://therecord.media/ahold-delhaize-cyberattack-grocery","label":"The Record","domainType":"media"}],"feedLabel":null},{"id":"news-dhs-to-ban-deepseek-from-federal-civilian-agencies","source":"general-news","category":"news","severity":"unknown","title":"DHS to ban DeepSeek from federal civilian agencies","description":"The order cites national security concerns, including sending data to servers in China, the potential for malware and the overall risk to federal IT systems.\nThe post DHS to ban DeepSeek from federal civilian agencies appeared first on CyberScoop.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-19T15:27:20.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://cyberscoop.com/dhs-bans-deepseek-federal-agencies/","label":"CyberScoop","domainType":"media"}],"feedLabel":null},{"id":"news-cybersecurity-incident-at-bae-systems-disrupts-us-bankruptcy-court-system","source":"general-news","category":"news","severity":"unknown","title":"Cybersecurity incident at BAE Systems disrupts US bankruptcy court system","description":"The outage has stopped official bankruptcy notices nationwide since Oct. 9, with no cause or restoration date announced.\nThe post Cybersecurity incident at BAE Systems disrupts US bankruptcy court system appeared first on CyberScoop.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-16T15:12:44.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://cyberscoop.com/bae-systems-cybersecurity-incident-us-bankruptcy-courts/","label":"CyberScoop","domainType":"media"}],"feedLabel":null},{"id":"news-adfection-how-mercenary-spyware-invades-victims-devices-through-targeted-adverti","source":"general-news","category":"news","severity":"unknown","title":"AdFection: How mercenary spyware invades victims’ devices through targeted advertising","description":"Researchers say the attacks have serious implications for the online advertising world, and regulators.\nThe post AdFection: How mercenary spyware invades victims’ devices through targeted advertising appeared first on CyberScoop.","indicators":{"cves":[],"ips":[],"domains":[],"urls":[],"hashes":{"md5":null,"sha1":null,"sha256":null}},"tags":[],"malwareFamily":null,"confidence":null,"publishedAt":"2026-10-15T10:00:00.000Z","fetchedAt":"2026-10-20T03:00:04.645Z","references":[{"url":"https://cyberscoop.com/adfection-zero-click-spyware-discover-tech/","label":"CyberScoop","domainType":"media"}],"feedLabel":null}],"llmPrompt":"You are a cybersecurity analyst. Summarize this daily threat intelligence report for 2026-10-20.\nTotal items collected: 5076 from sources: cisa-kev: 7, nvd: 4259, otx: 29, cisa-advisories: 14, vendor-blogs: 627, malware-bazaar: 20, abuse-ipdb: 20, threatfox: 3, general-news: 110.\n\nTop threats by severity:\n1. [CRITICAL] CVE-2026-102764 — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability\n2. [CRITICAL] CVE-2026-76519 — Cisco Secure Email Gateway Relative Path Traversal Vulnerability\n3. [CRITICAL] CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure\n4. [CRITICAL] CVE-2026-96119 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive informa…\n5. [CRITICAL] CVE-2026-87689 — The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::Web…\n6. [CRITICAL] CVE-2026-89107 — SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by…\n7. [CRITICAL] CVE-2026-89108 — SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundarie…\n8. [CRITICAL] CVE-2026-89110 — SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal fun…\n9. [CRITICAL] CVE-2026-89111 — The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applic…\n10. [CRITICAL] CVE-2026-85529 — GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3…\n\nProvide: (1) Executive summary (2-3 sentences), (2) Key threats to watch,\n(3) Recommended actions for security teams, (4) Notable trends.\nBe concise and actionable. Focus on what matters most to defenders."}