| medium |
CVE-2026-111915 — Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote a… |
vulnerability |
nvd |
CVE-2026-111915 |
|
2026-10-19 |
| medium |
CVE-2026-111899 — KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that… |
vulnerability |
nvd |
CVE-2026-111899 |
|
2026-10-19 |
| medium |
CVE-2026-111883 — Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attacke… |
vulnerability |
nvd |
CVE-2026-111883 |
|
2026-10-19 |
| medium |
CVE-2026-111829 — Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio… |
vulnerability |
nvd |
CVE-2026-111829 |
|
2026-10-19 |
| medium |
CVE-2026-111828 — Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listin… |
vulnerability |
nvd |
CVE-2026-111828 |
|
2026-10-19 |
| medium |
CVE-2026-110902 — Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Ticke… |
vulnerability |
nvd |
CVE-2026-110902 |
|
2026-10-19 |
| medium |
CVE-2026-110008 — @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the st… |
vulnerability |
nvd |
CVE-2026-110008 |
|
2026-10-19 |
| unknown |
Conduent Agrees to Pay $80m to Settle Data Breach Class Action |
news |
general-news |
|
|
2026-10-19 |
| critical |
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More |
news |
general-news |
|
zeroday |
2026-10-19 |
| unknown |
The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience |
news |
general-news |
|
|
2026-10-19 |
| critical |
CVE-2026-70197 .NET Remote Code Execution Vulnerability |
advisory |
vendor-blogs |
|
rce |
2026-10-19 |
| unknown |
CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability |
advisory |
vendor-blogs |
|
|
2026-10-19 |
| unknown |
F5 releases out-of-band patches for critical NGINX vulnerabilities |
news |
general-news |
|
|
2026-10-19 |
| unknown |
OpenCode Breach Could Affect OpenAI, Anthropic and Google |
news |
general-news |
|
|
2026-10-19 |
| medium |
CVE-2026-38671 — Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegi… |
vulnerability |
nvd |
CVE-2026-38671 |
|
2026-10-19 |
| medium |
CVE-2026-112214 — A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index objec… |
vulnerability |
nvd |
CVE-2026-112214 |
|
2026-10-19 |
| high |
CVE-2026-112142 — A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4… |
vulnerability |
nvd |
CVE-2026-112142 |
|
2026-10-19 |
| high |
CVE-2026-112141 — A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f4… |
vulnerability |
nvd |
CVE-2026-112141 |
|
2026-10-19 |
| medium |
CVE-2026-111845 — Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-produc… |
vulnerability |
nvd |
CVE-2026-111845 |
|
2026-10-19 |
| medium |
CVE-2026-111839 — Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-strea… |
vulnerability |
nvd |
CVE-2026-111839 |
|
2026-10-19 |
| medium |
CVE-2026-111836 — Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Ex… |
vulnerability |
nvd |
CVE-2026-111836 |
|
2026-10-19 |
| medium |
CVE-2026-111831 — Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting In… |
vulnerability |
nvd |
CVE-2026-111831 |
|
2026-10-19 |
| medium |
CVE-2026-110363 — Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly… |
vulnerability |
nvd |
CVE-2026-110363 |
|
2026-10-19 |
| high |
CVE-2026-103314 — A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authe… |
vulnerability |
nvd |
CVE-2026-103314 |
ransomware |
2026-10-19 |
| high |
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories |
news |
general-news |
|
phishing, supply-chain, infostealer |
2026-10-19 |
| unknown |
Need for enforceable AI accountability, zero-trust security as AI-driven cyber risks threaten critical infrastructure |
advisory |
vendor-blogs |
|
|
2026-10-19 |
| high |
CVE-2026-88900 — Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue… |
vulnerability |
nvd |
CVE-2026-88900 |
rce |
2026-10-19 |
| medium |
CVE-2026-112210 — A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs… |
vulnerability |
nvd |
CVE-2026-112210 |
|
2026-10-19 |
| medium |
CVE-2026-112140 — A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40de… |
vulnerability |
nvd |
CVE-2026-112140 |
|
2026-10-19 |
| medium |
CVE-2026-112138 — A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::j… |
vulnerability |
nvd |
CVE-2026-112138 |
|
2026-10-19 |
| medium |
CVE-2026-112108 — A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer… |
vulnerability |
nvd |
CVE-2026-112108 |
|
2026-10-19 |
| medium |
CVE-2026-112107 — A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTens… |
vulnerability |
nvd |
CVE-2026-112107 |
|
2026-10-19 |
| unknown |
From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software |
news |
general-news |
|
|
2026-10-19 |
| medium |
CVE-2026-91858 — FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.Transforme… |
vulnerability |
nvd |
CVE-2026-91858 |
|
2026-10-19 |
| high |
CVE-2026-88901 — Improper Restriction of XML External Entity Reference vulnerability in Apache Camel. This issue affe… |
vulnerability |
nvd |
CVE-2026-88901 |
|
2026-10-19 |
| medium |
CVE-2026-85317 — Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This iss… |
vulnerability |
nvd |
CVE-2026-85317 |
|
2026-10-19 |
| medium |
CVE-2026-85316 — Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. Th… |
vulnerability |
nvd |
CVE-2026-85316 |
|
2026-10-19 |
| medium |
CVE-2026-85315 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC comp… |
vulnerability |
nvd |
CVE-2026-85315 |
|
2026-10-19 |
| medium |
CVE-2026-85314 — Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Ca… |
vulnerability |
nvd |
CVE-2026-85314 |
|
2026-10-19 |
| medium |
CVE-2026-85313 — Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.… |
vulnerability |
nvd |
CVE-2026-85313 |
|
2026-10-19 |
| medium |
CVE-2026-85312 — Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Ca… |
vulnerability |
nvd |
CVE-2026-85312 |
|
2026-10-19 |
| medium |
CVE-2026-85301 — Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache… |
vulnerability |
nvd |
CVE-2026-85301 |
|
2026-10-19 |
| medium |
CVE-2026-85300 — Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache… |
vulnerability |
nvd |
CVE-2026-85300 |
|
2026-10-19 |
| medium |
CVE-2026-85296 — Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue af… |
vulnerability |
nvd |
CVE-2026-85296 |
|
2026-10-19 |
| medium |
CVE-2026-85260 — Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This… |
vulnerability |
nvd |
CVE-2026-85260 |
|
2026-10-19 |
| medium |
CVE-2026-85257 — Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF compo… |
vulnerability |
nvd |
CVE-2026-85257 |
|
2026-10-19 |
| medium |
CVE-2026-85254 — Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This is… |
vulnerability |
nvd |
CVE-2026-85254 |
|
2026-10-19 |
| high |
CVE-2026-85251 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP compon… |
vulnerability |
nvd |
CVE-2026-85251 |
|
2026-10-19 |
| high |
CVE-2026-85250 — Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.… |
vulnerability |
nvd |
CVE-2026-85250 |
|
2026-10-19 |
| medium |
CVE-2026-85249 — Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Ca… |
vulnerability |
nvd |
CVE-2026-85249 |
|
2026-10-19 |