PatchTheCVEBlog · 2-hour update · 2026-10-27
CVE-2026-105781 Adobe Campaign Classic (ACC: critical remote flaw, how to fix
By the PatchTheCVE security team · Updated 2026-10-27 · Data from NVD, CISA KEV, EPSS and vendor advisories
Critical severity (CVSS 10.0), remotely exploitable, no login needed. Recommended action: apply the vendor mitigation.
On 27 October 2026, 129 new CVEs were published that we track: 22 critical, 0 already exploited in the wild (CISA KEV) and 24 with a fix or vendor patch available. Each one is ranked by severity, exploitation signals and how easy it is to reach, so you can patch the right ones first.
Key takeaways
- Most urgent: CVE-2026-105781 (Adobe Campaign Classic (ACC): apply the vendor mitigation.
- 8 of the top 8 can be attacked over the network without a login.
- 24 of 129 new CVEs already have a fix or vendor patch.
- Most affected vendors: tanium, tp-link systems inc., gnupg.
What happened in this 2-hour window: the most serious item is CVE-2026-105781 (critical, CVSS 10.0, priority 40/100). Recommended action: apply the vendor mitigation. 8 of the 8 top items can be attacked remotely without a login. Most affected: tanium (22), tp-link systems inc. (5), gnupg (1). 24 of 129 new CVEs already have a fix or vendor patch; for the other 105, follow the downgrade or mitigation steps until one ships.
Patch these first
CVE-2026-105781: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm
- Risk: Critical (CVSS 10.0), priority 40/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
CVE-2026-114595: In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to
- Risk: Critical (CVSS 9.8), priority 39/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
CVE-2026-103594: A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remot
- Risk: Critical (CVSS 9.5), priority 38/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
CVE-2026-108142: A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
- Risk: Critical (CVSS 9.1), priority 37/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
CVE-2026-108015: Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-p
- Risk: Critical (CVSS 9.1), priority 37/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
CVE-2026-108014: Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-p
- Risk: Critical (CVSS 9.1), priority 37/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
CVE-2026-93866: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access
- Risk: Critical (CVSS 9.2), priority 37/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
CVE-2026-93865: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote,
- Risk: Critical (CVSS 9.2), priority 37/100 (patch this month), published 27 October 2026
- Exploitation: attackable over the network without a login
- What to do: apply the vendor mitigation
Why it ranks here: critical severity; remotely exploitable, no login, no user action.
References: NVD
Most affected vendors
- tanium: 22 new CVEs
- tp-link systems inc.: 5 new CVEs
- gnupg: 1 new CVE
- grafana: 1 new CVE
- oretnom23: 1 new CVE
- reduxjs: 1 new CVE
How to act on this list
- Start with anything marked exploited or patch now.
- Check what you run: see how to check a version and patch it on Linux, Windows, pip and npm.
- Prefer the vendor or distro fix. If none exists, read when to downgrade and when to mitigate.
- Verify afterwards. Distros often fix a flaw without changing the upstream version, here is how to confirm.
FAQ
What is the most serious vulnerability published on 27 October 2026?
CVE-2026-105781 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Comm) ranks highest, with a priority score of 40/100. Recommended action: apply the vendor mitigation.
Are any of the new CVEs exploited in the wild?
None of the new CVEs were on the CISA Known Exploited Vulnerabilities list when this was written. Keep watching the list, it changes daily.
Should I downgrade if there is no fix yet?
Only when an older release is confirmed unaffected and the package is not a core system component. Downgrades can break dependent software, so test first and hold the package until a fix ships.
Sources
- NIST National Vulnerability Database: CVE details and affected versions
- CVE Program: official CVE records
- CISA Known Exploited Vulnerabilities catalog: exploitation in the wild
- FIRST EPSS: exploit probability
- Distribution and vendor advisories linked under each item.