| high |
CVE-2026-113605 — Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSq… |
vulnerability |
nvd |
CVE-2026-113605 |
|
2026-10-20 |
| medium |
CVE-2026-113604 — Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader… |
vulnerability |
nvd |
CVE-2026-113604 |
|
2026-10-20 |
| medium |
CVE-2026-113603 — The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.… |
vulnerability |
nvd |
CVE-2026-113603 |
|
2026-10-20 |
| medium |
CVE-2026-113602 — json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to… |
vulnerability |
nvd |
CVE-2026-113602 |
|
2026-10-20 |
| medium |
CVE-2026-113601 — Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivi… |
vulnerability |
nvd |
CVE-2026-113601 |
|
2026-10-20 |
| medium |
CVE-2026-113600 — Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows au… |
vulnerability |
nvd |
CVE-2026-113600 |
|
2026-10-20 |
| medium |
CVE-2026-113598 — Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenti… |
vulnerability |
nvd |
CVE-2026-113598, CVE-2026-113599 |
|
2026-10-20 |
| medium |
CVE-2026-113597 — Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC rout… |
vulnerability |
nvd |
CVE-2026-113597 |
|
2026-10-20 |
| low |
CVE-2026-113596 — Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated us… |
vulnerability |
nvd |
CVE-2026-113596 |
|
2026-10-20 |
| medium |
CVE-2026-113595 — Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC… |
vulnerability |
nvd |
CVE-2026-113595 |
|
2026-10-20 |
| medium |
CVE-2026-113594 — Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated m… |
vulnerability |
nvd |
CVE-2026-113594 |
|
2026-10-20 |
| medium |
CVE-2026-113359 — Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated us… |
vulnerability |
nvd |
CVE-2026-113359 |
|
2026-10-20 |
| medium |
CVE-2026-112954 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST AP… |
vulnerability |
nvd |
CVE-2026-112954 |
|
2026-10-20 |
| medium |
CVE-2026-112953 — ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-expo… |
vulnerability |
nvd |
CVE-2026-112953, CVE-2026-112955, CVE-2026-112956, CVE-2026-113648, CVE-2026-113649 |
|
2026-10-20 |
| medium |
CVE-2026-112952 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@a… |
vulnerability |
nvd |
CVE-2026-112952 |
|
2026-10-20 |
| medium |
CVE-2026-112951 — ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field… |
vulnerability |
nvd |
CVE-2026-112951 |
|
2026-10-20 |
| medium |
CVE-2026-112950 — Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until… |
vulnerability |
nvd |
CVE-2026-112950 |
|
2026-10-20 |
| medium |
CVE-2026-112949 — Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7… |
vulnerability |
nvd |
CVE-2026-112949 |
|
2026-10-20 |
| medium |
CVE-2026-112948 — Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can… |
vulnerability |
nvd |
CVE-2026-112948 |
|
2026-10-20 |
| unknown |
CVE-2026-112947 — Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 b… |
vulnerability |
nvd |
CVE-2026-112947 |
|
2026-10-20 |
| unknown |
CVE-2026-112945 — Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3,… |
vulnerability |
nvd |
CVE-2026-112945, CVE-2026-112946 |
|
2026-10-20 |
| high |
CVE-2026-112836 — Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site… |
vulnerability |
nvd |
CVE-2026-112836 |
|
2026-10-20 |
| medium |
CVE-2026-112829 — Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Con… |
vulnerability |
nvd |
CVE-2026-112829 |
|
2026-10-20 |
| medium |
CVE-2026-112823 — Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipu… |
vulnerability |
nvd |
CVE-2026-112823 |
|
2026-10-20 |
| high |
CVE-2026-111765 — A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.… |
vulnerability |
nvd |
CVE-2026-111765 |
|
2026-10-20 |
| high |
CVE-2026-111764 — A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the… |
vulnerability |
nvd |
CVE-2026-111764 |
|
2026-10-20 |
| unknown |
CVE-2026-111763 — A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a ma… |
vulnerability |
nvd |
CVE-2026-111763 |
|
2026-10-20 |
| medium |
CVE-2026-109700 — Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-bo… |
vulnerability |
nvd |
CVE-2026-109700 |
|
2026-10-20 |
| unknown |
CVE-2026-107755 — Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below… |
vulnerability |
nvd |
CVE-2026-107755 |
|
2026-10-20 |
| high |
CVE-2025-71436 — Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerabi… |
vulnerability |
nvd |
CVE-2025-71436 |
|
2026-10-20 |
| unknown |
US Agencies Detail Incident Response Practices for Rogue AI Agents |
news |
general-news |
|
|
2026-10-20 |
| critical |
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution |
news |
general-news |
|
rce |
2026-10-20 |
| critical |
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA |
news |
general-news |
|
ransomware |
2026-10-20 |
| unknown |
There's only so much code: the rise in vulnerability numbers |
advisory |
vendor-blogs |
|
|
2026-10-20 |
| unknown |
CVE-2026-97400 — In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview t… |
vulnerability |
nvd |
CVE-2026-97400 |
|
2026-10-20 |
| unknown |
CVE-2026-96402 — A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary ob… |
vulnerability |
nvd |
CVE-2026-96402 |
|
2026-10-20 |
| unknown |
CVE-2026-95168 — An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_… |
vulnerability |
nvd |
CVE-2026-95168 |
|
2026-10-20 |
| unknown |
CVE-2026-95111 — A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which… |
vulnerability |
nvd |
CVE-2026-95111 |
|
2026-10-20 |
| medium |
CVE-2026-92454 — The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long… |
vulnerability |
nvd |
CVE-2026-92454 |
|
2026-10-20 |
| unknown |
CVE-2026-92449 — `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap t… |
vulnerability |
nvd |
CVE-2026-92449 |
|
2026-10-20 |
| unknown |
CVE-2026-92446 — `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with n… |
vulnerability |
nvd |
CVE-2026-92446 |
|
2026-10-20 |
| unknown |
CVE-2026-92162 — Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.… |
vulnerability |
nvd |
CVE-2026-92162 |
|
2026-10-20 |
| unknown |
CVE-2026-91189 — The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page… |
vulnerability |
nvd |
CVE-2026-91189 |
|
2026-10-20 |
| unknown |
CVE-2026-91186 — The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and w… |
vulnerability |
nvd |
CVE-2026-91186 |
|
2026-10-20 |
| critical |
CVE-2026-91059 — The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SO… |
vulnerability |
nvd |
CVE-2026-91059 |
ransomware |
2026-10-20 |
| medium |
CVE-2026-113466 — A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue a… |
vulnerability |
nvd |
CVE-2026-113466 |
|
2026-10-20 |
| medium |
CVE-2026-113411 — A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function sh… |
vulnerability |
nvd |
CVE-2026-113411 |
botnet |
2026-10-20 |
| high |
CVE-2026-113397 — A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects… |
vulnerability |
nvd |
CVE-2026-113397 |
|
2026-10-20 |
| unknown |
CVE-2026-112942 — launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2,… |
vulnerability |
nvd |
CVE-2026-112942, CVE-2026-112943, CVE-2026-112944 |
|
2026-10-20 |
| low |
CVE-2026-112941 — filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock a… |
vulnerability |
nvd |
CVE-2026-112941 |
|
2026-10-20 |