| unknown |
CVE-2026-86872 — A logic issue was addressed with improved state management. This issue is fixed in Safari 27, vision… |
vulnerability |
nvd |
CVE-2026-86872 |
|
2026-10-20 |
| unknown |
CVE-2026-86871 — An integer underflow was addressed with improved input validation. This issue is fixed in macOS Gold… |
vulnerability |
nvd |
CVE-2026-86871 |
|
2026-10-20 |
| unknown |
CVE-2026-86868 — An authentication issue was addressed with improved state management. This issue is fixed in macOS G… |
vulnerability |
nvd |
CVE-2026-86868 |
|
2026-10-20 |
| medium |
CVE-2026-84613 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS… |
vulnerability |
nvd |
CVE-2026-84613, CVE-2026-86918, CVE-2026-86944, CVE-2026-86953 |
|
2026-10-20 |
| unknown |
CVE-2026-84582 — A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and i… |
vulnerability |
nvd |
CVE-2026-84582 |
|
2026-10-20 |
| unknown |
CVE-2026-84579 — A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS… |
vulnerability |
nvd |
CVE-2026-84579 |
|
2026-10-20 |
| unknown |
CVE-2026-84547 — A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS… |
vulnerability |
nvd |
CVE-2026-84547 |
|
2026-10-20 |
| unknown |
CVE-2026-84508 — This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS… |
vulnerability |
nvd |
CVE-2026-84508 |
|
2026-10-20 |
| unknown |
CVE-2026-84490 — This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS… |
vulnerability |
nvd |
CVE-2026-84490 |
|
2026-10-20 |
| medium |
CVE-2026-77938 — Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tool… |
vulnerability |
nvd |
CVE-2026-77938 |
|
2026-10-20 |
| high |
CVE-2026-77937 — Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impe… |
vulnerability |
nvd |
CVE-2026-77937 |
|
2026-10-20 |
| critical |
CVE-2026-77936 — Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password… |
vulnerability |
nvd |
CVE-2026-77936 |
|
2026-10-20 |
| high |
CVE-2026-77935 — Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go… |
vulnerability |
nvd |
CVE-2026-77935 |
|
2026-10-20 |
| high |
CVE-2026-77934 — Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user… |
vulnerability |
nvd |
CVE-2026-77934 |
|
2026-10-20 |
| critical |
CVE-2026-77933 — DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.ym… |
vulnerability |
nvd |
CVE-2026-77933 |
|
2026-10-20 |
| critical |
CVE-2026-77932 — DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /ap… |
vulnerability |
nvd |
CVE-2026-77932 |
rce |
2026-10-20 |
| high |
CVE-2026-77930 — EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to r… |
vulnerability |
nvd |
CVE-2026-77930 |
|
2026-10-20 |
| high |
CVE-2026-77926 — Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin user… |
vulnerability |
nvd |
CVE-2026-77926 |
rce |
2026-10-20 |
| critical |
CVE-2026-75128 — Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any register… |
vulnerability |
nvd |
CVE-2026-75128 |
|
2026-10-20 |
| unknown |
CVE-2026-65396 — A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden G… |
vulnerability |
nvd |
CVE-2026-65396 |
|
2026-10-20 |
| unknown |
CVE-2026-65379 — The issue was addressed with improved handling of secure input state. This issue is fixed in macOS G… |
vulnerability |
nvd |
CVE-2026-65379 |
|
2026-10-20 |
| unknown |
CVE-2026-65372 — A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate… |
vulnerability |
nvd |
CVE-2026-65372 |
|
2026-10-20 |
| unknown |
CVE-2026-65356 — An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gat… |
vulnerability |
nvd |
CVE-2026-65356 |
|
2026-10-20 |
| unknown |
CVE-2026-28854 — The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Go… |
vulnerability |
nvd |
CVE-2026-28854 |
|
2026-10-20 |
| high |
CVE-2026-28853 — The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe… |
vulnerability |
nvd |
CVE-2026-28853 |
|
2026-10-20 |
| unknown |
CVE-2026-28850 — An authorization issue was addressed with improved state management. This issue is fixed in visionOS… |
vulnerability |
nvd |
CVE-2026-28850 |
|
2026-10-20 |
| high |
CVE-2026-109444 — OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers… |
vulnerability |
nvd |
CVE-2026-109444 |
|
2026-10-20 |
| high |
CVE-2026-109443 — JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated us… |
vulnerability |
nvd |
CVE-2026-109443 |
rce |
2026-10-20 |
| critical |
CVE-2026-109442 — piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat age… |
vulnerability |
nvd |
CVE-2026-109442 |
rce |
2026-10-20 |
| medium |
CVE-2026-109441 — LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' s… |
vulnerability |
nvd |
CVE-2026-109441 |
|
2026-10-20 |
| high |
CVE-2026-109440 — LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote… |
vulnerability |
nvd |
CVE-2026-109440 |
|
2026-10-20 |
| critical |
CVE-2026-109395 — Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc… |
vulnerability |
nvd |
CVE-2026-109395 |
|
2026-10-20 |
| unknown |
CVE-2026-105298 — Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :… |
vulnerability |
nvd |
CVE-2026-105298 |
|
2026-10-20 |
| high |
CVE-2026-105297 — Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the… |
vulnerability |
nvd |
CVE-2026-105297 |
|
2026-10-20 |
| unknown |
CVE-2026-8355 — IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSR… |
vulnerability |
nvd |
CVE-2026-8355 |
|
2026-10-20 |
| medium |
CVE-2026-112373 — A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function… |
vulnerability |
nvd |
CVE-2026-112373 |
|
2026-10-20 |
| high |
CVE-2026-109126 — IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a… |
vulnerability |
nvd |
CVE-2026-109126 |
|
2026-10-20 |
| high |
CVE-2026-107400 — IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to… |
vulnerability |
nvd |
CVE-2026-107400 |
|
2026-10-20 |
| high |
CVE-2026-107366 — IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership ver… |
vulnerability |
nvd |
CVE-2026-107366 |
|
2026-10-20 |
| high |
CVE-2026-105453 — IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow… |
vulnerability |
nvd |
CVE-2026-105453 |
|
2026-10-20 |
| medium |
CVE-2026-77684 — The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not… |
vulnerability |
nvd |
CVE-2026-77684 |
|
2026-10-19 |
| medium |
CVE-2026-19595 — The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c v… |
vulnerability |
nvd |
CVE-2026-19595 |
|
2026-10-19 |
| medium |
CVE-2026-19178 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to g… |
vulnerability |
nvd |
CVE-2026-19178 |
|
2026-10-19 |
| unknown |
CVE-2026-112991 — The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF)… |
vulnerability |
nvd |
CVE-2026-112991 |
|
2026-10-19 |
| medium |
CVE-2026-112372 — A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile o… |
vulnerability |
nvd |
CVE-2026-112372 |
|
2026-10-19 |
| critical |
CVE-2026-112371 — A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the… |
vulnerability |
nvd |
CVE-2026-112371 |
|
2026-10-19 |
| critical |
CVE-2026-112370 — A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of t… |
vulnerability |
nvd |
CVE-2026-112370 |
|
2026-10-19 |
| medium |
CVE-2025-36252 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library… |
vulnerability |
nvd |
CVE-2025-36252 |
|
2026-10-19 |
| medium |
CVE-2025-36069 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which… |
vulnerability |
nvd |
CVE-2025-36069 |
|
2026-10-19 |
| medium |
CVE-2025-36061 — IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4… |
vulnerability |
nvd |
CVE-2025-36061 |
|
2026-10-19 |