| medium |
AOMEI Backupper update servers hijacked to push malware: Check your PC |
threat-intel |
otx |
|
aomei backupper, remote access backdoor, supply chain attack, upgrade-now.exe, update infrastructure compromise, software distribution hijacking, supply-chain |
2026-10-19 |
| unknown |
Microsoft fixes game, app crashes caused by recent Windows update |
news |
general-news |
|
|
2026-10-19 |
| unknown |
OnlyFans Copyright Takedowns Expose Compromised Websites |
news |
general-news |
|
|
2026-10-19 |
| unknown |
CVE-2026-8168 — Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt al… |
vulnerability |
nvd |
CVE-2026-8168 |
|
2026-10-19 |
| critical |
CVE-2026-112296 — FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthentica… |
vulnerability |
nvd |
CVE-2026-112296 |
|
2026-10-19 |
| medium |
CVE-2026-112295 — FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated us… |
vulnerability |
nvd |
CVE-2026-112295 |
|
2026-10-19 |
| medium |
CVE-2026-112294 — FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.count… |
vulnerability |
nvd |
CVE-2026-112294 |
|
2026-10-19 |
| medium |
CVE-2026-112293 — BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that… |
vulnerability |
nvd |
CVE-2026-112293 |
|
2026-10-19 |
| critical |
CVE-2026-112292 — CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated at… |
vulnerability |
nvd |
CVE-2026-112292 |
|
2026-10-19 |
| medium |
CVE-2026-112291 — Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on t… |
vulnerability |
nvd |
CVE-2026-112291 |
|
2026-10-19 |
| medium |
CVE-2026-112290 — Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 con… |
vulnerability |
nvd |
CVE-2026-112290 |
|
2026-10-19 |
| medium |
CVE-2026-112289 — Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff user… |
vulnerability |
nvd |
CVE-2026-112289 |
|
2026-10-19 |
| low |
CVE-2026-112288 — Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users… |
vulnerability |
nvd |
CVE-2026-112288 |
|
2026-10-19 |
| high |
CVE-2026-112287 — Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailControlle… |
vulnerability |
nvd |
CVE-2026-112287 |
|
2026-10-19 |
| medium |
CVE-2026-112286 — Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope… |
vulnerability |
nvd |
CVE-2026-112286 |
|
2026-10-19 |
| medium |
CVE-2026-112285 — Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authe… |
vulnerability |
nvd |
CVE-2026-112285 |
|
2026-10-19 |
| low |
CVE-2026-112284 — libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR()… |
vulnerability |
nvd |
CVE-2026-112284 |
|
2026-10-19 |
| medium |
CVE-2026-112283 — VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_… |
vulnerability |
nvd |
CVE-2026-112283 |
|
2026-10-19 |
| medium |
CVE-2026-112282 — VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point()… |
vulnerability |
nvd |
CVE-2026-112282 |
|
2026-10-19 |
| medium |
CVE-2026-112281 — libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_h… |
vulnerability |
nvd |
CVE-2026-112281 |
|
2026-10-19 |
| medium |
CVE-2026-112280 — libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser… |
vulnerability |
nvd |
CVE-2026-112280 |
|
2026-10-19 |
| medium |
CVE-2026-112279 — rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in or… |
vulnerability |
nvd |
CVE-2026-112279 |
|
2026-10-19 |
| medium |
CVE-2026-112278 — rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in… |
vulnerability |
nvd |
CVE-2026-112278 |
|
2026-10-19 |
| medium |
CVE-2026-112277 — rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap… |
vulnerability |
nvd |
CVE-2026-112277 |
|
2026-10-19 |
| medium |
CVE-2026-112276 — Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows at… |
vulnerability |
nvd |
CVE-2026-112276 |
|
2026-10-19 |
| medium |
CVE-2026-112275 — Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun raste… |
vulnerability |
nvd |
CVE-2026-112275 |
|
2026-10-19 |
| low |
CVE-2026-112274 — libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allow… |
vulnerability |
nvd |
CVE-2026-112274 |
|
2026-10-19 |
| medium |
CVE-2026-112273 — libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns… |
vulnerability |
nvd |
CVE-2026-112273 |
|
2026-10-19 |
| medium |
CVE-2026-112272 — Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section p… |
vulnerability |
nvd |
CVE-2026-112272 |
ransomware |
2026-10-19 |
| medium |
CVE-2026-112271 — libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 s… |
vulnerability |
nvd |
CVE-2026-112271 |
ransomware |
2026-10-19 |
| medium |
CVE-2026-112270 — SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory alloc… |
vulnerability |
nvd |
CVE-2026-112270 |
|
2026-10-19 |
| medium |
CVE-2026-112269 — SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode regist… |
vulnerability |
nvd |
CVE-2026-112269 |
|
2026-10-19 |
| medium |
CVE-2026-112268 — sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that… |
vulnerability |
nvd |
CVE-2026-112268 |
|
2026-10-19 |
| medium |
CVE-2026-112267 — SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery v… |
vulnerability |
nvd |
CVE-2026-112267 |
|
2026-10-19 |
| medium |
CVE-2026-112266 — SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort ot… |
vulnerability |
nvd |
CVE-2026-112266 |
|
2026-10-19 |
| medium |
CVE-2026-112265 — LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauth… |
vulnerability |
nvd |
CVE-2026-112265 |
|
2026-10-19 |
| high |
CVE-2026-112264 — BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attacke… |
vulnerability |
nvd |
CVE-2026-112264 |
|
2026-10-19 |
| high |
CVE-2026-112263 — Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows att… |
vulnerability |
nvd |
CVE-2026-112263 |
|
2026-10-19 |
| high |
CVE-2026-112262 — RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQ… |
vulnerability |
nvd |
CVE-2026-112262 |
|
2026-10-19 |
| medium |
CVE-2026-112222 — Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configu… |
vulnerability |
nvd |
CVE-2026-112222 |
|
2026-10-19 |
| high |
CVE-2026-112146 — A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown proces… |
vulnerability |
nvd |
CVE-2026-112146 |
|
2026-10-19 |
| high |
CVE-2026-112145 — A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerabil… |
vulnerability |
nvd |
CVE-2026-112145 |
|
2026-10-19 |
| medium |
CVE-2026-112144 — A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4… |
vulnerability |
nvd |
CVE-2026-112144 |
|
2026-10-19 |
| high |
CVE-2026-112143 — A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e… |
vulnerability |
nvd |
CVE-2026-112143 |
|
2026-10-19 |
| medium |
CVE-2026-111939 — Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticat… |
vulnerability |
nvd |
CVE-2026-111939 |
phishing |
2026-10-19 |
| medium |
CVE-2026-111938 — Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sa… |
vulnerability |
nvd |
CVE-2026-111938 |
|
2026-10-19 |
| medium |
CVE-2026-111937 — Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sa… |
vulnerability |
nvd |
CVE-2026-111937 |
|
2026-10-19 |
| medium |
CVE-2026-111936 — Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because valida… |
vulnerability |
nvd |
CVE-2026-111936 |
|
2026-10-19 |
| low |
CVE-2026-111935 — NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysi… |
vulnerability |
nvd |
CVE-2026-111935 |
|
2026-10-19 |
| medium |
CVE-2026-111925 — Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to a… |
vulnerability |
nvd |
CVE-2026-111925 |
ransomware |
2026-10-19 |