[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102795 | 2 Oct 2026 | CVSS 9.3 | Apache Software Foundation Apache Traffic ServerImproper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0… | |
| CVE-2026-104854 | 2 Oct 2026 | CVSS 8.5 | Nx daemon and plugin worker sockets are accessible to other local usersNx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon… | Fix |
| CVE-2026-104848 | 2 Oct 2026 | CVSS 9.5 | Tinypool: Prototype Pollution gadget in worker options leads to Remote Code ExecutionTinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.1, Tinypool constructs ThreadPool.options from a normal options object… | Fix |
| CVE-2026-104849 | 2 Oct 2026 | CVSS 9.5 | Tinypool: Prototype Pollution Gadget to RCE in run() optionsTinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads filename from a caller-supplied options object in… | Fix |
| CVE-2026-104851 | 2 Oct 2026 | CVSS 8.8 | fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Executionfsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0… | Fix |
| CVE-2026-104853 | 2 Oct 2026 | CVSS 5.8 | Nx: Path traversal in nx migrate package-migrations extractionNx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the… | Fix |
| CVE-2026-94543 | 2 Oct 2026 | CVSS 5.3 | Next.js has cache poisoning of SSG and ISR pages in self-hosted applicationsNext.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages… | Fix |
| CVE-2026-94544 | 2 Oct 2026 | CVSS 4.2 | Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pagesNext.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared… | Fix |
| CVE-2026-96613 | 2 Oct 2026 | CVSS 6.5 | Meari IoT Cloud Platform OpenAPI ServiceThe Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device… | |
| CVE-2026-51922 | 2 Oct 2026 | CVSS 9.8 | Vulnerabilityagentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an… | |
| CVE-2026-67989 | 2 Oct 2026 | CVSS 7.5 | Vulnerabilitycrmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in… | |
| CVE-2026-94483 | 2 Oct 2026 | CVSS 6.5 | Next.js has Server-Side Request Forgery in Image OptimizationNext.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled… | Fix |
| CVE-2026-94484 | 2 Oct 2026 | CVSS 4.8 | Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of serviceNext.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all… | Fix |
| CVE-2026-94485 | 2 Oct 2026 | CVSS 5.3 | Next.js has information disclosure in App Router metadata image routes via dynamicParams bypassNext.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model… | Fix |
| CVE-2026-94486 | 2 Oct 2026 | CVSS 5.4 | Next.js has information disclosure in development server's Model Context Protocol endpointNext.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model… | Fix |
| CVE-2026-51904 | 2 Oct 2026 | CVSS 9.8 | VulnerabilitySuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots… | |
| CVE-2026-51906 | 2 Oct 2026 | CVSS 9.1 | VulnerabilityIn TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write… | |
| CVE-2026-51907 | 2 Oct 2026 | CVSS 8.1 | VulnerabilityIn TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files… | |
| CVE-2026-51911 | 2 Oct 2026 | CVSS 9.8 | Vulnerabilityvanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py). Depending on the exposed entry… | |
| CVE-2026-51914 | 2 Oct 2026 | CVSS 8.8 | VulnerabilityTransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots… | |
| CVE-2026-51915 | 2 Oct 2026 | CVSS 9.8 | VulnerabilityTransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller. In affected source snapshots, get_tool and… | |
| CVE-2026-51916 | 2 Oct 2026 | CVSS 7.5 | VulnerabilityTransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in… | |
| CVE-2026-51917 | 2 Oct 2026 | CVSS 7.3 | VulnerabilityFinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code. | |
| CVE-2026-51918 | 2 Oct 2026 | CVSS 9.8 | VulnerabilityFinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code (). | |
| CVE-2026-104912 | 2 Oct 2026 | CVSS 7.1 | MISPMISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attribute search that triggers… | |
| CVE-2026-104914 | 2 Oct 2026 | CVSS 5.3 | MISPMISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints. When a user queries for… | |
| CVE-2026-51898 | 2 Oct 2026 | CVSS 9.8 | Vulnerabilitysinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute. | |
| CVE-2026-51899 | 2 Oct 2026 | CVSS 4.3 | VulnerabilityIn SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit_schedule… | |
| CVE-2026-51901 | 2 Oct 2026 | CVSS 8.1 | VulnerabilitySuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows… | |
| CVE-2026-104906 | 2 Oct 2026 | CVSS 6.2 | MISPMISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of… | |
| CVE-2026-104907 | 2 Oct 2026 | CVSS 4.8 | MISPMISP contains a cross-site scripting (XSS) vulnerability in the remote event preview page. When a linked (remote) MISP server is configured, the… | |
| CVE-2026-104908 | 2 Oct 2026 | CVSS 7.1 | MISPMISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new… | |
| CVE-2026-104910 | 2 Oct 2026 | CVSS 5.3 | MISPMISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given… | |
| CVE-2026-104845 | 2 Oct 2026 | CVSS 7.5 | Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserializationSeroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray… | Fix |
| CVE-2026-104846 | 2 Oct 2026 | CVSS 9.8 | Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON… | Fix |
| CVE-2026-104847 | 2 Oct 2026 | CVSS 8.5 | ProseMirror has a XSS vulnerability in prosemirror-view's paste handlingProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste… | Fix |
| CVE-2026-104900 | 2 Oct 2026 | CVSS 5.3 | MISPMISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview. The count field template… | |
| CVE-2026-104901 | 2 Oct 2026 | CVSS 5.1 | MISPMISP contains a cross-site scripting (XSS) vulnerability in the ID Translator feature. When a user views the ID Translator page, the application… | |
| CVE-2026-104843 | 2 Oct 2026 | CVSS 5.9 | uv: Path traversal on Windows through wheel extractionuv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel… | Fix |
| CVE-2026-104844 | 2 Oct 2026 | CVSS 5.9 | PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustionPostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/parser.js splitWord() can… | Fix |
| CVE-2026-103629 | 2 Oct 2026 | CVSS 4.3 | Google ChromeInteger overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-103630 | 2 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… | |
| CVE-2026-103631 | 2 Oct 2026 | CVSS 8.8 | Google ChromeBuffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-103648 | 2 Oct 2026 | CVSS 9.1 | demsking image-downloaderPath traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside… | |
| CVE-2026-103621 | 2 Oct 2026 | CVSS 4.3 | Google ChromeInteger overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-103622 | 2 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-103623 | 2 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-103624 | 2 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-103625 | 2 Oct 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-103626 | 2 Oct 2026 | CVSS 9.6 | Google ChromeIncorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering… | |
| CVE-2026-103627 | 2 Oct 2026 | CVSS 6.5 | Google ChromeInformation leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page… | |
| CVE-2026-103628 | 2 Oct 2026 | CVSS 9.6 | Google ChromeOut of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-101104 | 2 Oct 2026 | CVSS 7.7 | Meari IoT Cloud Platform OpenAPI ServiceThe Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations… | |
| CVE-2026-90970 | 2 Oct 2026 | CVSS 9.9 | GitLab AI GatewayGitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3… | Fix |
| CVE-2026-39717 | 2 Oct 2026 | CVSS 4.3 | ThimPress LearnPressMissing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This… | |
| CVE-2026-5782 | 2 Oct 2026 | CVSS 5.2 | MRV Technology Foreign Trade Ltd. Co. TurkHotspotImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in MRV Technology Foreign Trade Ltd. Co… | |
| CVE-2026-104638 | 2 Oct 2026 | CVSS 5.3 | onetwothreeneth HospitalManagementSystemA security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted… | |
| CVE-2026-32584 | 2 Oct 2026 | CVSS 5.3 | Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & ExportInsertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export… | |
| CVE-2026-32585 | 2 Oct 2026 | CVSS 6.5 | Airano MCP BridgeMissing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-39439 | 2 Oct 2026 | CVSS 6.5 | Kiera Howe WebSamuraiMissing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This… | |
| CVE-2026-39444 | 2 Oct 2026 | CVSS 5.4 | PublishPress SeriesAuthorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly… | |
| CVE-2026-39600 | 2 Oct 2026 | CVSS 4.7 | Mehul Gohil Aculect AI CompanionURL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue… | |
| CVE-2026-39601 | 2 Oct 2026 | CVSS 3.7 | WPdevelop Booking CalendarConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking… | |
| CVE-2026-104625 | 2 Oct 2026 | CVSS 6.3 | CodeAstro Simple Loan Management SystemA security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php… | |
| CVE-2026-104637 | 2 Oct 2026 | CVSS 7.3 | onetwothreeneth HospitalManagementSystemA weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is… | |
| CVE-2026-104026 | 2 Oct 2026 | CVSS 7.8 | Meta Platforms, Inc Sapling SCMIn Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed… | |
| CVE-2026-94422 | 2 Oct 2026 | CVSS 8.8 | FedoraAn incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering… | |
| CVE-2026-85215 | 2 Oct 2026 | CVSS 7.1 | GG Soft Software Services Inc. PaperworkImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows… | |
| CVE-2026-93875 | 2 Oct 2026 | CVSS 7.2 | Crocoblock JetAppointmentThe JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and… | |
| CVE-2026-104721 | 2 Oct 2026 | CVSS 6.3 | QOS.CH Sarl Logback-classicPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically… | |
| CVE-2026-19652 | 2 Oct 2026 | CVSS 9.8 | DiviEngine Divi MembershipThe Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the… | |
| CVE-2026-104613 | 2 Oct 2026 | CVSS 6.3 | CodeAstro Simple Pharmacy Management SystemA vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file… | |
| CVE-2026-104614 | 2 Oct 2026 | CVSS 6.3 | CodeAstro Simple Pharmacy Management SystemA vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file… | |
| CVE-2026-96277 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift… | |
| CVE-2026-96286 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftUncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to… | |
| CVE-2026-96287 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftInefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-96289 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftUncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade… | |
| CVE-2026-94658 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftInefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-94655 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue… | |
| CVE-2026-94656 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94657 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-94654 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftLoop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-85209 | 2 Oct 2026 | CVSS 6.5 | AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS)Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows… | |
| CVE-2026-85476 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftLoop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-83632 | 2 Oct 2026 | CVSS 9.2 | Apache Software Foundation Apache ThriftAllocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This… | |
| CVE-2026-83663 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftUncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame… | |
| CVE-2026-83745 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftMemory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang… | |
| CVE-2026-66081 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftAccess of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are… | |
| CVE-2026-66331 | 2 Oct 2026 | CVSS 6.9 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport. This issue affects Apache… | |
| CVE-2026-66837 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftStack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-66858 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftThe protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields… | |
| CVE-2026-66859 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftNULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before… | |
| CVE-2026-61374 | 2 Oct 2026 | CVSS 7.1 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-63772 | 2 Oct 2026 | CVSS 8.7 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0… | |
| CVE-2026-66054 | 2 Oct 2026 | CVSS 6.9 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift… | |
| CVE-2026-66055 | 2 Oct 2026 | CVSS 8.2 | Apache Software Foundation Apache ThriftAllocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue… | |
| CVE-2026-104733 | 2 Oct 2026 | CVSS 7.4 | ProcessOne ejabberdUser Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter… | |
| CVE-2026-11795 | 2 Oct 2026 | CVSS 5.3 | Softtr Informatics Trading Limited Company E-Commerce PackObservable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects… | |
| CVE-2026-104610 | 2 Oct 2026 | CVSS 10.0 | Tenda HG7A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file… | |
| CVE-2026-104611 | 2 Oct 2026 | CVSS 9.1 | Tenda AC9A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component… |
Page 124 of 168